If you found a security issue in TKeeper, please report it privately.
Email: security@exploit.org
Subject: [Anvil Security]
Please DON'T open a public GitHub issue for security reports.
- Affected version / commit
- What the attacker can achieve (impact)
- Steps to reproduce (PoC if possible)
- Any relevant logs/config (remove secrets)
If you want encrypted communication, mention it and we'll share a public key.
We'll acknowledge your report, triage it, and coordinate disclosure. Security fixes are shipped publicly (release notes may mention the report, unless you prefer anonymity).