Security

SECURITY.md

Security Policy

Supported Versions

This is an early-stage project (MVP). Security fixes are applied to the latest main branch.

Reporting a Vulnerability

Please do not open public GitHub issues for security-sensitive reports.

Instead, contact the maintainer privately:

Email: REPLACE_ME

Include:

A clear description of the issue and potential impact
Steps to reproduce
Any proof-of-concept (PoC) payloads (redacted when appropriate)

Operational Safety Notes

This project is a honeypot-like service. Running it implies risk:

Avoid running with unnecessary privileges.
Never store secrets in the container/image.
Treat collected payloads as potentially malicious data.
If you enable pfctl automation, make sure you understand the firewall rules you are applying on the host.

There aren't any published security advisories