This is the security policy for Gamma Web Server.

We take the security of our software seriously and appreciate the efforts of the community in improving it. If you discover a security vulnerability, we kindly request that you follow our responsible disclosure process.

To report a security vulnerability, please follow these steps:

1. Do not publicly disclose the vulnerability or related details.
2. Send an email to recon at [email protected] with a detailed description of the vulnerability. Please include information such as the impact and potential exploit scenarios.
3. The email should be acknowledged within 2-3 days and recon may request additional information or clarification if needed.
4. We aim to respond to vulnerability reports and provide updates on the progress of addressing them in a timely manner.
5. If desired, you will be publicly acknowledged for your contribution once the vulnerability is resolved.

We kindly request that you adhere to responsible disclosure practices when reporting security vulnerabilities:

• Refrain from publicly disclosing the vulnerability before it has been resolved.
• Avoid actively exploiting the vulnerability or performing any malicious actions.
• Do not modify, access, or delete any data without explicit authorization.

We appreciate your dedication to protecting the security and integrity of our software and its users. As a token of our gratitude, we may consider providing rewards or recognition for responsibly disclosed security vulnerabilities, subject to our discretion.

Thank you for contributing to the security of Gamma Web Server.