Skip to content

Latest commit

 

History

History
31 lines (16 loc) · 2.63 KB

SECURITY.md

File metadata and controls

31 lines (16 loc) · 2.63 KB
Raw

Security Policy

Reporting a Vulnerability

The Cardano Foundation | Identity Wallet project takes security seriously. We appreciate your efforts in disclosing any potential vulnerabilities responsibly.

If you have discovered a security vulnerability within this project, please report it to us as soon as possible. We encourage responsible disclosure and kindly ask you to follow the guidelines outlined below.

Guidelines for Responsible Disclosure

To ensure that the security vulnerability is properly addressed, we request that you adhere to the following guidelines:

  1. Do not exploit the vulnerability: Do not attempt to exploit the vulnerability or gain unauthorized access to any user data. Only perform actions that are necessary to identify or validate the vulnerability.

  2. Privately disclose the vulnerability: Please do not disclose the vulnerability publicly before we have had an opportunity to investigate and address the issue. We appreciate your discretion.

  3. Contact us directly: Send an email to our team at [email protected] with the subject line: "[Cardano Foundation | Identity Wallet] Security Vulnerability Report, or contact our team at Discord."

  4. Provide detailed information: In your report, please include detailed information about the vulnerability, including steps to reproduce it and any potential impact.

  5. Share your contact information: We would appreciate it if you could provide your name and contact information, including your email address or other means of communication, so we can reach out to you if we require any additional information.

  6. Keep communication confidential: While we investigate and address the vulnerability, we kindly request that you keep all communication related to the vulnerability confidential.

  7. Allow time for a response: We strive to acknowledge vulnerability reports as soon as possible and will make every effort to respond within a reasonable timeframe. Please be patient while we investigate and address the reported issue.

Recognition and Acknowledgment

We believe in recognizing the valuable contributions of the security community and are open to acknowledging those who responsibly disclose vulnerabilities. If you would like to be acknowledged for your responsible disclosure, please let us know when reporting the vulnerability. However, we respect your privacy and will not disclose any personal information without your explicit consent.

Thank you for helping us ensure the security of the Cardano Foundation | Identity Wallet project and the broader Cardano ecosystem. Your efforts are greatly appreciated.