Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

DO NOT open a public GitHub issue
Email: support@saaskit.app
Include a description of the vulnerability, steps to reproduce, and potential impact

We will respond within 48 hours and work with you to resolve the issue.

Supported Versions

Version	Supported
latest	Yes

Security Best Practices

Always use HTTPS for server connections
Keep your ~/.free/access.key private
Do not share QR codes or session tokens
Use environment variables for sensitive configuration (never hardcode secrets)

There aren’t any published security advisories