We recommend using the latest stable release for full security support.

If you discover a security vulnerability in ClarityVault2026, please follow the steps below:

1. Do not create a public issue.
2. Email us directly at: security@clarityvault.xyz
3. Include:
   • A detailed description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Any suggested mitigation

We will respond within 72 hours and coordinate a fix. Once resolved, we may publish a security advisory and credit the reporter (if desired).

• We follow responsible disclosure practices.
• Vulnerabilities will be patched before public disclosure.
• Critical issues may result in emergency releases.

ClarityVault2026 includes:

• ✅ Supabase RLS (Row Level Security)
• ✅ JWT-based authentication
• ✅ Secret scanning alerts
• ✅ GitHub push protection
• ✅ CI/CD secret masking

This project complies with:

• MIT License
• GitHub Security Best Practices
• OWASP Top 10 Guidelines

We thank all contributors and researchers who help keep ClarityVault secure.
If you'd like to contribute to security testing, reach out via email or GitHub Discussions.