Armour Infosec practices and expects responsible disclosure. If you discover a security vulnerability in any repository in this organization, please report it privately.

• Do not open a public issue for security vulnerabilities.
• Email info@armourinfosec.com with:
  • A description of the issue and its impact
  • Steps to reproduce (proof of concept where possible)
  • Affected repository, version, or commit
• If a repository has GitHub Private Vulnerability Reporting enabled, you may use that instead.

• We aim to acknowledge reports promptly and will keep you updated on remediation progress.
• Please give us reasonable time to investigate and release a fix before any public disclosure.
• We appreciate coordinated disclosure and will credit reporters who wish to be acknowledged.

This policy covers code and content maintained under the Armour Infosec organization. Techniques described in our training material must only be used against systems you own or are explicitly authorized to test.