Security Policy
Supported Versions
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
Reporting a Vulnerability
Please do not report security vulnerabilities through public GitHub issues.
Instead, please email security@auditoria.ai.
Authentication Best Practices
- Always enforce MFA in Keycloak.
- Rotate Client Secrets periodically.
- Use HTTPS for all production traffic.