Security is a top priority for Fayd Protocol. If you discover a security vulnerability, please report it responsibly to help us protect the network and its users.

Do NOT open a public issue for security vulnerabilities.

Instead, choose one of the following private channels:

1. GitHub Security Advisory

   • Go to the Security tab
   • Click "Report a vulnerability"
   • Submit your report privately

2. Email

   • Send details to: security@fayd.sh (placeholder — update when domain is ready)
   • Use subject: [SECURITY] Brief description of vulnerability

Please provide as much detail as possible:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Affected versions/components
• Suggested mitigation (if any)
• Your contact information for follow-up

We will keep you informed throughout the process.

We appreciate and acknowledge security researchers who help improve Fayd:

• Contributors will be credited in security advisories (with permission).
• Significant findings may be highlighted in release notes.
• We value responsible disclosure and collaborative improvement.

• Keep your node updated to the latest version.
• Run with minimal privileges.
• Monitor resource usage and logs.
• Use firewall rules to restrict unnecessary access.

• Verify task inputs and outputs.
• Use appropriate verification levels for your trust requirements.
• Encrypt sensitive data before submission.

• Architecture — Security model and threat analysis- FAQ — Security and privacy questions
• ROADMAP — Security milestones