27 lines (17 loc) · 777 Bytes

Security Policy

Supported Versions

Version	Supported
Latest	Yes

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

Do NOT open a public GitHub issue
Use GitHub Security Advisories to report privately
Or email: support@orcest.ai

We will acknowledge receipt within 48 hours and provide a timeline for resolution.

Security Best Practices

All secrets must be stored in environment variables, never in code
All services require SSO authentication via login.orcest.ai
API keys must be rotated regularly
All traffic must use HTTPS/TLS

Part of the Orcest AI ecosystem.