Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
main	✅ Yes

Reporting a Vulnerability

Do NOT open a public GitHub issue for security vulnerabilities.

Report privately via GitHub Security Advisories:

Go to the Security tab
Click "Report a vulnerability"
Fill in the details

We will respond within 72 hours and coordinate a fix + disclosure timeline.

Scope

FCRI web platform (fcri.science)
AZRAEL initiative components
Any deployed infrastructure

Out of Scope

Social engineering
Physical security
Third-party dependencies (report directly to upstream)

There aren't any published security advisories