# Security Policy

## Reporting a Vulnerability

Do not disclose security vulnerabilities in public discussions, pull requests, or the service issue tracker.

Email `contact@digitalplat.org` with:

- A description of the vulnerability and its potential impact.
- The affected page, endpoint, or workflow.
- Reproduction steps or a proof of concept.
- Any suggested mitigation, if available.

Please allow the maintainers time to investigate before publishing details. Do not access, modify, retain, or share data that does not belong to you.

## Domain Abuse

Security vulnerabilities and domain abuse are handled separately. Report phishing, malware, spam, or other abuse involving a registered domain to `abusereport@digitalplat.org`.

## Scope

This repository contains documentation and public project information. Vulnerabilities in the DigitalPlat Domain application may involve code maintained in [DigitalPlatDev/Domain-OSS](https://github.com/DigitalPlatDev/Domain-OSS), but they should still be reported privately using the contact above.