# Security Policy

## Reporting Security Issues

If you discover a security vulnerability, please report it privately via GitHub Security Advisories.

Please include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if available)

## Response Timeline

We aim to acknowledge reports within 48 hours and provide regular updates on progress.

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| Latest  | :white_check_mark: |
| Older   | :x:                |

## Security Best Practices

- Keep dependencies up to date
- Use environment variables for sensitive configuration
- Follow the principle of least privilege
