Quantara is an early-stage MVP, not a production platform — please keep that in mind when assessing severity. Each repo has its own SECURITY.md with repo-specific scope notes:

• quantara-core security policy
• quantara-web security policy
• quantara-toolkit security policy

Please do not open a public issue. Use GitHub's private vulnerability reporting on the relevant repo, or contact the org owners at github.com/quantarahq. Include a description, steps to reproduce, and the affected version/commit. We'll acknowledge reports as quickly as we can and follow up once a fix is available.