Skip to content

Security: Imhotep-Tech/imhotep_smart_clinic

SECURITY.md

Security Policy

Supported Versions

Currently, we support these versions with security updates:

Version Supported
1.0.0

Reporting a Vulnerability

We take the security of Imhotep Smart Clinic seriously. If you believe you've found a security vulnerability, please follow these steps:

  1. Do NOT disclose the vulnerability publicly (no GitHub issues for security vulnerabilities)
  2. Email us at imhoteptech@outlook.com with:
    • A description of the vulnerability
    • Steps to reproduce
    • Potential impact
    • Suggestions for mitigation if you have any

What to Expect

When you report a vulnerability:

  1. You will receive acknowledgment of your report within 48 hours
  2. We will investigate and provide an initial assessment within 7 days
  3. We will keep you informed about our progress in resolving the issue
  4. Once the vulnerability is fixed, we will credit you (if desired) for the responsible disclosure

Security Measures

Imhotep Smart Clinic implements several security measures:

  • Regular dependency updates to patch known vulnerabilities
  • Input validation to prevent injection attacks
  • HTTPS encryption for all data in transit
  • Strict access controls for user data
  • Regular security audits

For Security Researchers

We appreciate the work security researchers do to help keep our users safe. To encourage responsible disclosure:

  • We will not take legal action against you for security research conducted in good faith
  • We will acknowledge your contribution in our release notes (unless you prefer to remain anonymous)
  • We aim to fix confirmed vulnerabilities as quickly as possible

Thank you for helping keep Imhotep Smart Clinic secure!

There aren’t any published security advisories