# Security Policy

## Reporting a vulnerability

Please report vulnerabilities privately, not in a public issue.

- Email [security@wispers.dev](mailto:security@wispers.dev)
  ([PGP key](https://wispers.dev/pgp.txt)), or
- use GitHub's
  [Report a vulnerability](https://github.com/s-te-ch/wispers-access/security/advisories/new)
  form on this repo.

We acknowledge reports within 72 hours and share a status update within 7
business days. The full disclosure policy is at
[wispers.dev/about#disclosure](https://wispers.dev/about#disclosure).
Published advisories appear at
[wispers.dev/security](https://wispers.dev/security).

## Supported versions

Wispers Access is in open beta. Security fixes land in the latest release
only, so please check that the issue reproduces on the newest version.