# Security policy

Please report suspected vulnerabilities privately by emailing
[ayuda@frihet.io](mailto:ayuda@frihet.io). Include the affected version or URL,
the observed impact, and enough non-sensitive detail for us to reproduce the
problem safely.

Do not open a public GitHub issue for a suspected vulnerability. Do not include
credentials, personal or customer data, exploit payloads, or production data in
public comments, logs, or screenshots.

We will acknowledge a report, assess its severity, and coordinate remediation
and disclosure with the reporter. This document intentionally does not describe
internal security architecture or operational access paths.