Docs/Security Policy

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in PurePoint, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, please email security concerns to the maintainers privately via GitHub's private vulnerability reporting.

What to Include

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact
  • Suggested fix (if any)

Response Timeline

We aim to acknowledge reports within 48 hours and provide a fix or mitigation plan within 7 days.