# Security Policy ## Introduction Thank you for helping us keep our project secure. This document outlines our security policy and provides instructions for reporting vulnerabilities. ## Reporting a Vulnerability If you discover a security vulnerability, please report it to us in a responsible manner. To report a vulnerability, please email us at [security@0xcarbon.org]. Include the following details in your report: - A description of the vulnerability - Steps to reproduce the vulnerability - Any potential impact of the vulnerability ## Expected Response Time We will acknowledge your report within 48 hours and provide a detailed response within 5 business days, including an evaluation of the vulnerability and an expected resolution date. ## Responsible Disclosure We ask that you do not disclose the vulnerability publicly until we have had a chance to address it. We believe in responsible disclosure and will work with you to ensure that vulnerabilities are fixed promptly. ## Acknowledgments Thank you for helping us keep our project secure!