This document outlines the security policies, supported versions, and vulnerability reporting procedures for the SentinelForensicsAI platform.
The following versions of SentinelForensicsAI are currently supported with security updates:
| Version | Supported | Notes |
|---|---|---|
| 1.0.x | ✅ Yes | Current stable release branch |
| < 1.0.0 | ❌ No | Legacy pre-release versions |
We take the security of SentinelForensicsAI seriously. If you find a security vulnerability, please report it immediately rather than opening a public issue on GitHub.
To report a vulnerability:
- Email your report to: shlokthorat29075@gmail.com
- Include a detailed description of the issue, steps to reproduce, and a proof of concept (PoC) if available.
- We will acknowledge receipt of your report within 48 hours and provide a timeline for triage and patch deployment.
When a vulnerability is reported:
- Triage: We investigate and confirm the vulnerability.
- Patching: A fix is developed in a private security fork.
- Verification: The patch is verified through the unit test suite.
- Release: A security patch version is tagged and released.
- Advisory: A security advisory will be published on GitHub detailing the fix and credit to the reporter.