If you discover a security vulnerability in TrueRisk, please report it responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

Instead, please email security concerns to javierdejesusds@gmail.com with:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

You will receive a response within 48 hours acknowledging receipt. We will work with you to understand and address the issue before any public disclosure.

This policy applies to:

• The TrueRisk web application (truerisk.cloud)
• The TrueRisk API
• This source code repository