# Security Policy

## Supported Versions

DAC is currently pre-1.0. The latest `main` branch and the most recent tagged
release are the versions that receive security fixes.

## Reporting a Vulnerability

Please report security vulnerabilities privately to:

- `security@getbruin.com`

Do not open public GitHub issues for security reports.

Include as much detail as possible:

- affected DAC version or commit
- reproduction steps
- impact assessment
- any proof-of-concept or logs that help confirm the issue