Please do not report suspected vulnerabilities through public GitHub issues.

If you believe you have found a security issue in Pathfinder, report it privately to the project maintainer.

Include, where possible:

• a clear description of the issue;
• affected component or file;
• steps to reproduce;
• expected and observed behavior;
• potential security impact; and
• any supporting logs, traces, or proof-of-concept details.

Please avoid including real customer data, credentials, secrets, threat-intelligence source credentials, API tokens, or other sensitive information.

Pathfinder is currently pre-release and under active development.

Security behavior, interfaces, schemas, intelligence models, source integrations, and implementation details may change before a supported release.

Please allow reasonable time for investigation and remediation before publicly disclosing a reported vulnerability.

Validated security issues will be addressed according to their severity and impact.

Security reports relating to Pathfinder source code, build processes, intelligence ingestion, source handling, parsing, normalization, correlation, storage, backend services, database handling, APIs, access control, protected integrations, or other Pathfinder-controlled components are welcome.

Issues in third-party intelligence sources, feeds, products, services, or infrastructure that Pathfinder does not control should normally be reported to the applicable vendor or provider.

Security reports should be sent privately to the project maintainer.

Email: security@ironsignalsystems.com
Maintainer: John Joseph Wood
Project: Pathfinder / Iron Signal Systems