# Security contact for routeround.co.uk — RFC 9116

Contact: mailto:security@routeround.co.uk
Expires: 2027-08-02T00:00:00.000Z
Preferred-Languages: en
Canonical: https://routeround.co.uk/.well-known/security.txt
Policy: https://routeround.co.uk/legal/privacy

# RouteRound is operated by Desultory Ltd (England and Wales, company 17361684).
#
# We are a small team and have no bug bounty. We will acknowledge a genuine
# report within five working days and tell you honestly what we intend to do
# about it and when.
#
# Useful in a report: the URL or endpoint, what you did, what happened, and
# what you expected. Please do not run automated scanners against the live
# service, and please do not access, modify or retain data belonging to anyone
# other than yourself — a proof of concept against your own account is enough.
#
# Known and disclosed, so you need not report them: there is no audit logging,
# no multi-factor authentication, and no penetration test has been carried out.
# These are documented in our data processing agreement rather than hidden.