Please report security issues privately to support@benmore.tech. Do not open a public issue for security-sensitive reports.

Include, where possible:

• A description of the issue and its impact.
• Steps to reproduce (a minimal app or request is ideal).
• The affected version (benmore version) and platform.

We will acknowledge receipt, investigate, and coordinate a fix and disclosure timeline with you. Please give us a reasonable window to remediate before any public disclosure.

This repository is the open-source Benmore framework (the app runtime). The hosted benmore.ai platform is a separate product; vulnerabilities specific to the hosted service can also be reported to the address above.