# Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 0.4.x   | Yes                |
| < 0.4.0| No                 |

## Reporting a Vulnerability

If you discover a security vulnerability in Concierge::Auth, please
report it responsibly.

**Contact:** Bruce Van Allen <bva@cruzio.com>

**Response timeline:**

- Acknowledgement within 48 hours
- Initial assessment within 7 days
- Fix or mitigation plan within 30 days

Please include:

- A description of the vulnerability
- Steps to reproduce the issue
- Any potential impact assessment
- Suggested fix, if available

**Do not** open a public GitHub issue for security vulnerabilities. Use the
email address above for responsible disclosure.
