For security and trust boundaries insights, see the THREATMODEL.md.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests. To ensure the safety of the community and prevent premature disclosure of exploits, we utilize GitHub Private Vulnerability Reporting.

1. Go to the Security tab of this repository.
2. Click Report a vulnerability under the Advisories section.
3. Provide a clear description of the vulnerability, including:
   • The affected component (Hub, specific Sensor, or SDK).
   • Steps to reproduce the exploit.
   • The potential impact (e.g., DoS, Remote Code Execution, Authentication Bypass).
   • Any potential mitigation or fix you might suggest.

Optionally you can send an email at info@honeywire.dev.

As a solo maintainer, I will do my best to acknowledge receipt of your vulnerability report and will work with you to patch the issue before a public CVE or advisory is published.

Thank you for helping keep HoneyWire secure!