If you discover a security vulnerability in Auton-OSINT:

1. Do not open a public issue.

2. Instead, email the maintainer directly:

   contact: [REDACTED]
   subject: [SECURITY] Auton-OSINT Vulnerability Report

3. Please include:

   • A description of the issue
   • Steps to reproduce (if known)
   • Proof-of-concept (if available)
   • Potential impact

You’ll receive a response within 72 hours, and we’ll coordinate a safe resolution timeline.

• Optional secure mode (CLI password-protected scans)
• YAML checksum validation for config integrity
• Tor isolation per module
• Plans for API key encryption (future)

Thank you for helping keep Auton-OSINT secure for everyone.