Decent Solution takes the security of our software, services, and the data entrusted to us seriously. We appreciate the efforts of security researchers and the community in helping us keep our ecosystem safe.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, report them privately so we can investigate and remediate before any public disclosure:

• ✉️ Email: developers@decentsolution.cloud
• 🔒 Where available, use GitHub Private Vulnerability Reporting ("Report a vulnerability" under the Security tab of the affected repository).

Please include, where possible:

• A description of the vulnerability and its potential impact
• Steps to reproduce, or a proof-of-concept
• Affected versions, components, or endpoints
• Any suggested remediation

• Acknowledgement within 3 business days.
• An initial assessment and severity triage within 10 business days.
• Coordinated disclosure: we will keep you informed of progress and agree on a disclosure timeline once a fix is available.

This policy applies to repositories under the @Decent-Solution organisation. Vulnerabilities in third-party dependencies should also be reported to the upstream project where appropriate.

We are happy to credit researchers who responsibly disclose valid issues, unless you prefer to remain anonymous.

Thank you for helping keep Decent Solution and our community secure. ⚛️