# Security Policy

We take security seriously for Hubble and appreciate the efforts of security researchers who help keep our users safe.

## Reporting a Vulnerability

If you believe you've found a security vulnerability, please follow responsible disclosure practices and **do not** open a public GitHub issue, as this could expose the vulnerability before a fix is available.

Instead, please report it privately through GitHub:

- **GitHub Security Advisory:** [Open a private advisory](https://github.com/bholmesdev/hubble.md/security/advisories/new)

We will acknowledge your report promptly and work with you to understand and resolve the issue as quickly as possible.