Security

We take the confidentiality and integrity of research artifacts and credentials seriously. Report vulnerabilities via responsible disclosure.

Reporting

Email security@algobreeder.dev. See SECURITY.md in the repository for expectations and timelines.

Practices (roadmap & current intent)

• Least-privilege API keys and entitlement checks
• Encrypted transit (TLS) in production
• Audit logs for admin and entitlement changes
• Secret management outside source control