The canonical security policy is ../SECURITY.md. In short: do not open public GitHub issues for vulnerabilities; email security@protocolwealthllc.com with the description, reproduction steps, affected versions, and any proof of concept.
Protocol Wealth LLC is an SEC-registered investment adviser (CRD #335298).