Security policy

Security Monitor is under active development and has no stable release yet. Security fixes are currently made against the main branch. Do not rely on the current build as a production security control.

Please do not report vulnerabilities in a public issue. Use GitHub’s private vulnerability reporting page if the repository offers the private reporting form. If that form is unavailable, do not disclose technical details publicly; use the maintainer’s GitHub contact page to request a private reporting channel.

Include the affected commit or version, impact, and a minimal reproduction when safe to do so. Do not attach real credentials, source code, customer data, or production inventory.