We found a vulnerability in this company's software and we are trying to do responsible disclosure! We want to notify the organization and contact them about the security issues... can you track down their contact info?
Solution
Visting the website
We see RFC9116, which is a file format that helps with security vulnerability disclosures
Reading more baout RFC 9116, we find a security.txt file under the /.well-known/ directory
Going to /.well-known/security.txt, we find the flag