# Bolrach — security contact and disclosure policy. # Published per RFC 9116. Reports become a ticket with a named handler, never a shared mailbox. # # One file serves every Bolrach apex from the edge, so these three URLs cannot drift apart again. # The previous copy pointed at bolrach.com/company/contact, bolrach.com/security and its own # canonical URL — all three answered 404, which is how a disclosure policy quietly stops working. Contact: https://support.ng/contact Policy: https://legal.bolrach.group/security Preferred-Languages: en Canonical: https://bolrach.group/.well-known/security.txt Canonical: https://bolrach.com/.well-known/security.txt Canonical: https://bolrach.io/.well-known/security.txt Canonical: https://bolrach.dev/.well-known/security.txt Canonical: https://bolrach.tech/.well-known/security.txt Expires: 2027-09-06T00:00:00.000Z