# Security Policy

## Reporting a Vulnerability

Please do not open public issues for security vulnerabilities.

Report privately to:

- `aliozyildirim@gmail.com`

Include:

- Affected component
- Reproduction steps
- Impact assessment
- Suggested fix (if any)

## Response Targets

- Initial response: within 72 hours
- Triage status update: within 7 days

## Disclosure

After remediation and release, responsible disclosure is encouraged.
