SECURITY.md

Security Policy

Reporting a Vulnerability

We take the security of our software seriously. If you believe you have found a security vulnerability, please report it to us.

Here's how:

1. Email us at fluenttypeai@gmail.com. Please provide as much information as possible about the vulnerability. This may include steps to reproduce, the potential impact, etc.

2. Do NOT create a public GitHub issue.

3. We will respond to your report within 5 business days and will keep you updated throughout the process.

Disclosure Policy

When we learn of a security vulnerability, our process is as follows:

1. Confirm the vulnerability and determine its severity.
2. Address the vulnerability in a timely manner. This may involve creating a patch for the vulnerability, implementing new security measures, etc.
3. Notify users who are affected. We will inform users about the vulnerability, what they can do to protect themselves, and what we've done to fix it.
4. Post a security advisory on GitHub. This will include a description of the vulnerability, its potential impact, and steps users can take to protect themselves.

We appreciate your help in keeping FluentTypeAI and its users safe.