diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..32777f531 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,23 @@ +## Security + +At Bruno, we take security seriously and are committed to providing a safe experience for all users. +We appreciate responsible disclosure and value contributions that help improve Bruno's security. + + +## Reporting a Vulnerability + +To report a security issue, please email us at [security@usebruno.com](mailto:security@usebruno.com) + +When reporting a vulnerability, please include as many details as possible to help us investigate: + +- **Type of issue** (e.g., cross-site scripting, malicious npm package, etc.). +- **Full paths of source file(s)** related to the issue. +- **Location of affected code** (tag, branch, commit, or direct URL). +- **Any special configuration** required to reproduce the issue. +- **Step-by-step instructions** to reproduce the issue. +- **Proof-of-concept or exploit code** (if available). +- **Potential impact**, including how an attacker might exploit the issue. + + +**Please do not report security vulnerabilities through public GitHub issues.** +