Goal: Highlighting the "Cybersecurity" pillar and responsible disclosure.
Security Policy As a project focused on Digital Sovereignty and critical infrastructures, security is our primary directive.
Supported Versions: Only the latest stable release of HeartFire receives active security updates.
Reporting a Vulnerability: Please do not report security vulnerabilities via public GitHub issues. Instead, send a detailed report to security@iaauteco.com.
Disclosure Process: Our team will acknowledge receipt within 48 hours and provide a timeline for remediation. We follow a coordinated vulnerability disclosure (CVD) model to protect our users and infrastructure.