We release patches for security vulnerabilities. Currently supported versions:

We take the security of RevKit seriously. If you discover a security vulnerability, please follow these steps:

Please DO NOT report security vulnerabilities through public GitHub issues.

Instead, please report them via email to: security@revealui.com

Please include the following information in your report:

• Type of vulnerability
• Full paths of source file(s) related to the manifestation of the vulnerability
• Location of the affected source code (tag/branch/commit or direct URL)
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Proof-of-concept or exploit code (if possible)
• Impact of the vulnerability, including how an attacker might exploit it

• We will acknowledge your email within 48 hours
• We will send a more detailed response within 7 days indicating the next steps
• We will work on a fix and coordinate a release timeline with you
• We will notify you when the vulnerability has been fixed

• Once a fix is released, we will publicly disclose the vulnerability
• We appreciate allowing us time to remediate before public disclosure
• We will credit you for responsible disclosure (unless you prefer to remain anonymous)

We support safe harbor for security researchers who:

• Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our services
• Only interact with accounts you own or with explicit permission of the account holder
• Do not exploit a security issue you discover for any reason
• Report the vulnerability promptly
• Allow a reasonable time to fix the issue before public disclosure

If you have questions about this policy, please contact us at security@revealui.com