Security Policy

Supported Versions

Version	Supported
1.0.x	✅
< 1.0	❌

We take security seriously. If you discover a vulnerability in OpenSentinel, please follow these steps:

Do NOT open a public issue.
Email the maintainers at azanian.eagle@gmail.com.
Include a detailed description of the vulnerability, steps to reproduce, and potential impact.

We will acknowledge your report within 72 hours and provide a timeline for a fix.

SAST: We run Static Application Security Testing on every commit.
Dependency Scanning: We monitor dependencies for known vulnerabilities using cargo audit and GitHub Dependabot.
Privacy: We adhere to GDPR and POPIA standards. No PII is collected without explicit consent (and OpenSentinel is designed to be PII-free).