Security

SECURITY.md

Security Policy

Reporting Vulnerabilities

Report security issues to: security@nullsec.dev

Do not disclose publicly until patched.

Scope

J2534 driver vulnerabilities
ECU communication exploits
Data leakage in calibration files

Responsible Disclosure

We follow a 90-day disclosure timeline.

There aren’t any published security advisories