We take security seriously. If you discover a security vulnerability, please do not open a public issue.

Instead, send a description of the issue to turin@turintechsolutions.com with:

• A brief description of the vulnerability
• Steps to reproduce
• Affected versions
• Any potential mitigations you've identified

You should receive a response within 48 hours. If the issue is confirmed, we will:

1. Acknowledge receipt of the report
2. Investigate and develop a fix
3. Release a patched version
4. Disclose the vulnerability after the fix is released

This security policy covers the latest release of this project. Older versions may have known vulnerabilities that are fixed in newer releases.

At this time, there is no bug bounty program. We appreciate responsible disclosure in the interest of keeping the community safe.