# Security Policy

## Reporting a Vulnerability

Please report security vulnerabilities **privately** to mario@miaostaff.com.

Do not open a public GitHub issue for security vulnerabilities.

**Response time:** 48 hours for acknowledgment, 7 days for a fix or mitigation plan.

## Scope
- autosearch core library and MCP server
- Search channel implementations
- REST API server
