Files
BURP-AI/SECURITY.md
T
2026-03-23 21:28:38 +05:30

37 lines
728 B
Markdown

# 🔐 Security Policy
## 📬 Reporting a Vulnerability
If you discover a security issue, please report it via:
- GitHub Security Advisory (preferred)
Do not open public issues for vulnerabilities.
---
## 📌 Scope
In scope:
- Security vulnerabilities in the application or extension
- Data leaks, auth issues, or unsafe request handling
- AI-related issues (prompt injection, misuse, data exposure)
Out of scope:
- Theoretical issues without proof
- Third-party services
---
## ⚠️ Guidelines
- Provide clear steps to reproduce
- Include proof-of-concept if possible
- Do not publicly disclose before a fix
---
## 🛡️ Note
This project is intended for ethical and defensive security research only.