# Security Policy
## Reporting Security Vulnerabilities
**Please do not report security vulnerabilities through public GitHub issues.**
If you discover a security vulnerability, please report it by emailing [viktor@farcic.com](mailto:viktor@farcic.com).
Please include the following information in your report:
- Description of the vulnerability
- Steps to reproduce the issue
- Affected versions
- Potential impact
- Any suggested fixes (if available)
## Response Timeline
We will acknowledge your report within **3 business days** and provide a detailed response within **7 business days** indicating the next steps in handling your report.
We will keep you informed of the progress towards a fix and may ask for additional information or guidance.
## Security Updates
Security updates will be released as soon as possible after a fix is available. We recommend keeping your installation up to date with the latest releases.
## Security Best Practices
When using DevOps AI Toolkit, we recommend:
- Keep the software updated to the latest version
- Follow the principle of least privilege
- Review and audit your configurations regularly
Thank you for helping to keep DevOps AI Toolkit and our users safe!