# Security Policy

## Supported Versions

We currently support the latest major version of this project. Older versions may not receive security updates.

## Reporting a Vulnerability

If you discover a security vulnerability, please report it privately by emailing us at [security@plasius.co.uk](mailto:security@plasius.co.uk). Please do not create a public issue for security-related matters.

## Response Timeline

We aim to acknowledge your report within 2 business days and to provide a more detailed response (including next steps and, if applicable, a timeline for a fix) within 7 business days.

## Disclosure Policy

We request that you give us the opportunity to address the vulnerability before publicly disclosing it. We will coordinate with you on public disclosure once a fix is available and deployed.