# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in Spider, please report it responsibly.

**Email:** [security@spider.cloud](mailto:security@spider.cloud)

Please include:

- Description of the vulnerability
- Steps to reproduce
- Affected versions
- Any potential impact

We will acknowledge your report within 48 hours and aim to release a fix within 7 days for critical issues.

## Scope

This policy covers the `spider`, `spider_agent`, `spider_cli`, `spider_utils`, `spider_worker`, and related crates in this repository.

## Supported Versions

Security fixes are applied to the latest release only. We recommend always using the most recent version.
