# security.txt — RFC 9116 (https://www.rfc-editor.org/rfc/rfc9116)
# Responsible disclosure for goldmanglobal.com.au, goldman-forge and ForgeWright.
# Last reviewed: 2026-06-19.

Contact: mailto:security@goldmanglobal.com.au
Contact: https://www.goldmanglobal.com.au/security
Expires: 2027-06-19T23:59:59z
Preferred-Languages: en, en-AU
Canonical: https://www.goldmanglobal.com.au/.well-known/security.txt

# We acknowledge reports within 5 business days and aim to triage within
# 10 business days. We do not run a paid bug-bounty programme; we do
# credit researchers in our changelog on a best-effort basis.
# Please do NOT test against customer deployments — only against
# goldmanglobal.com.au, *.goldmanglobal.com.au, and claimdesk247.com.au.