If you discover a security vulnerability:

1. Do NOT open a public GitHub issue
2. Send an email to: contact@cleatsquad.dev
3. Include: description, steps to reproduce, potential impact

• Acknowledgment: Within 48 hours
• Status Update: Within 7 days
• Resolution: Within 14 days

# Never commit .env files
# Use strong passwords (min 16 characters)
MYSQL_ROOT_PASSWORD=<strong-password>
DB_PASSWORD=<strong-password>
RABBITMQ_DEFAULT_PASS=<strong-password>

• All default passwords changed
• SSL/TLS properly configured
• Database ports not exposed externally
• Two-Factor Authentication enabled for Magento admin
• Backups configured

• Magento Security Best Practices
• Docker Security
• FrankenPHP Security
• PHP Security

Security inquiries: contact@cleatsquad.dev