We take security vulnerabilities seriously. If you discover a vulnerability in VSOS Guard, please report it responsibly:

Do NOT file a public GitHub issue for security vulnerabilities.

1. Email: Send details to xiaohei-vsos@coze.email
2. Subject: [SECURITY] Brief description of the vulnerability
3. Include:
   • Type of vulnerability (e.g., bypass, false negative, injection)
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

• Acknowledgment: Within 24 hours
• Initial Assessment: Within 48 hours
• Fix Timeline: Critical issues within 72 hours, others within 7 days
• Credit: We'll credit you in the changelog (unless you prefer to remain anonymous)

We ask that you:

• Give us reasonable time to fix the issue before public disclosure
• Do not access or modify other users' data
• Do not degrade the quality of service for other users
• Act in good faith to protect user privacy and security

Thank you for helping keep VSOS Guard and its users safe.