Contact: mailto:security@grupr.ai
Expires: 2027-12-31T23:59:59Z
Encryption: https://grupr.ai/.well-known/pgp-key.asc
Preferred-Languages: en
Canonical: https://grupr.ai/.well-known/security.txt
Policy: https://github.com/grupr-ai/agent/blob/main/SECURITY.md
Acknowledgments: https://grupr.ai/security/acknowledgments

# Reporting a security vulnerability
#
# Email security@grupr.ai with reproduction steps + impact assessment.
# We acknowledge within 48 hours and aim to fix or mitigate high/critical
# severity within 7 days.
#
# Public GitHub issues are NOT the right channel for security reports —
# they expose users before a fix ships.