Security

SECURITY.md

Security Policy

Version: 1.0.0-rc
Date: 2026-06-13

Report suspected vulnerabilities to contact@bioqcore.org with subject Security Disclosure.

Allowed

Non-destructive vulnerability reports.
Security header issues.
Public static site issues.
Accidental exposed secret reports.

Not allowed

Denial-of-service tests.
Social engineering.
Malware, persistence or exfiltration.
Attempting to access patient data or private accounts.

No bounty program is active unless explicitly announced.

There aren't any published security advisories