# Security Policy

## Supported versions

omnirush.ai is under active development. Fixes land on the latest release, published at
https://github.com/omnirush-ai/omnirush-gui/releases/latest.

## Reporting a vulnerability

Please do not open public GitHub issues for security vulnerabilities.

Instead, report vulnerabilities privately to:

- Email: `info@omnirush.ai`
- Subject: `security: <short summary>`

Please include:

- A clear description of the issue
- Reproduction steps or proof of concept
- Impact assessment
- Suggested remediation (if known)

## Response expectations

- We will acknowledge receipt within 3 business days.
- We will provide an initial triage status within 7 business days.
- We will share remediation or mitigation guidance as soon as available.

## Disclosure guidance

Please keep details private until a fix or mitigation is available and maintainers
confirm public disclosure timing.