# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in TradePilot, please report it privately.

**Do not** disclose security vulnerabilities publicly through GitHub Issues.

Please send details to the project maintainers via GitHub Security Advisory or email.

## What to include

- Description of the vulnerability
- Steps to reproduce
- Affected versions
- Possible impact

## Response

We will acknowledge receipt within 48 hours and provide a timeline for a fix.