# Our security addresses
Contact: mailto: mail@secure.exigia.com
Contact: mailto:dpo@exigia.com
# These details will expire
Expires: 2028-12-31T23:59:00.000Z
# Our preferred langauge
Preferred-Languages: en

For websites, the security.txt file should be placed under the /.well-known/ path (/.well-known/security.txt) [RFC8615]. It can also be placed in the root directory (/security.txt) of a website, especially if the /.well-known/ directory cannot be used for technical reasons, or simply as a fallback. The file can be placed in both locations of a website at the same time.