English · 🇮🇹 Italiano

EngramVault is designed for storing AI conversations, knowledge graphs, and sensitive developer context. We take the security of this data very seriously.

If you discover a potential security vulnerability in EngramVault, please do not disclose it publicly in a standard GitHub issue.

Please report vulnerabilities using one of the following methods:

1. GitHub Private Vulnerability Reporting (Preferred):
   Navigate to the Security tab of the repository and click "Report a vulnerability". This allows secure, private communication directly with the maintainers.

2. Email:
   Send an encrypted or clear text email to security@engramvault.net.
   For non-security bugs, please use GitHub Issues or contact bugs@engramvault.net.

To help us triage and resolve the issue quickly, please include:

• A description of the vulnerability and its potential impact.
• Clear steps to reproduce the issue or a minimal proof-of-concept (PoC).
• Any relevant configuration flags, environment variables, or logs.

• Acknowledgment: We will acknowledge receipt of your report within 48 hours.
• Assessment: We will confirm the vulnerability and provide an estimated timeline for a patch.
• Coordination: We will work with you to coordinate a public disclosure once the fix has been tested and released.