# Security Policy

## Reporting a Vulnerability

If you believe you have found a security vulnerability in this project, **do not** report it via public GitHub issues.

Instead, please follow these steps:

1. Please include as much information as possible, including:
   - A description of the issue
   - Steps to reproduce the vulnerability
   - The potential impact
   - Any known workarounds
2. Fill the [security issue](https://github.com/latitude-dev/latitude-llm/security/advisories/new) with all the details you can provide.

**We ask you to give us a reasonable amount of time to resolve the issue before any public disclosure.**

## Our Commitment

- We will acknowledge your report as soon as possible (within 3 business days).
- We will investigate the issue and keep you informed of our progress.
- We will notify you when the vulnerability has been fixed.

We value the security of our users and appreciate your help in keeping our project safe!

---

Thank you for helping us improve the security of this project.
