Contact: mailto:security@nightboxllc.com
Contact: mailto:artem@nightboxllc.com
Expires: 2027-05-05T00:00:00.000Z
Preferred-Languages: en, ru
Canonical: https://nightboxllc.com/.well-known/security.txt
Policy: https://nightboxllc.com/security
Acknowledgments: https://nightboxllc.com/security
Encryption: https://nightboxllc.com/.well-known/openpgp-policy.txt

# Nightbox LLC security disclosure policy
# Please report security vulnerabilities responsibly.
# We acknowledge all good-faith reports within 72 hours.

# Federal contractor identity (for federal vulnerability disclosure pipelines / CISA KEV cross-reference)
# Legal Name:           NIGHTBOX LLC
# SAM.gov UEI:          UHCAB6UXXKF2
# SAM.gov Status:       Submitted Registration (2026-05-05)
# SAM.gov Purpose:      All Awards
# SAM.gov Entity URL:   https://sam.gov/entity/UHCAB6UXXKF2/coreData
# IRS EIN:              39-4373044
# CAGE Code:            pending DLA assignment
# Wyoming SOS Filing:   2025-001768533
# NAICS Primary:        541714 (R&D in Biotechnology, except Nanobiotechnology)
# Wikidata (Org):       Q139590659
# Wikidata (Founder):   Q139590669
# ORCID (Founder):      0009-0006-0003-6806

# Federal cybersecurity posture (machine-readable)
# Section 889 (China telecom equipment ban) attestation:  /.well-known/section-889.json
# OMB M-22-09 Zero Trust Architecture posture:            /.well-known/zero-trust.json
# Foreign Ownership, Control or Influence (FOCI):         /.well-known/foci.json
# Canonical SAM entity record (machine-readable):         /.well-known/sam-entity.json
# AI / LLM access manifest:                                /.well-known/ai-priority.json

# Email authentication
# SPF:    v=spf1 include:_spf.google.com ~all (strict alignment)
# DKIM:   2048-bit RSA via Google Workspace (selector google._domainkey.nightboxllc.com)
# DMARC:  v=DMARC1; p=reject; adkim=s; aspf=s; pct=100
# Audit:  mail-tester.com 10/10 (April 2026)