Security updates are not yet guaranteed for any version. Once the product reaches a stable release, a supported versions policy will be established.

If you discover a security vulnerability, please report it privately:

Email: hpk.poyraz@gmail.com

Please include:

• Description of the vulnerability
• Steps to reproduce
• Any known affected components

What to expect:

• Acknowledgment within 48 hours
• We will assess severity and impact
• We may ask for additional details before issuing a fix

This security policy applies to:

• TheCloud backend (Go)
• TheCloud API
• TheCloud web frontend

Issues in third-party dependencies should be reported to their maintainers directly.