Please do not report suspected vulnerabilities through public GitHub issues.

If you believe you have found a security issue in File Intelligence (FI), report it privately to the project maintainer.

Include, where possible:

• a clear description of the issue;
• affected component or file;
• steps to reproduce;
• expected and observed behavior;
• potential security impact; and
• any supporting logs, traces, or proof-of-concept details.

Please avoid including real customer data, credentials, secrets, or other sensitive information.

FI is currently pre-release and under active development.

Security behavior, interfaces, schemas, and implementation details may change before a supported release.

Please allow reasonable time for investigation and remediation before publicly disclosing a reported vulnerability.

Validated security issues will be addressed according to their severity and impact.

Security reports relating to FI source code, build processes, Windows collection components, transport, backend services, database handling, classification, protected access, or other FI-controlled components are welcome.

Issues in third-party products or infrastructure that FI does not control should normally be reported to the applicable vendor.

Security reports should be sent privately to the project maintainer.

Email: security@ironsignalsystems.com
Maintainer: John Joseph Wood
Project: File Intelligence (FI) / Iron Signal Systems