We take the security of RevMind seriously. We release patches for security vulnerabilities.

Please DO NOT report security vulnerabilities through public GitHub issues.

Instead, please report them via email to: security@revealui.com

Please include the following information in your report:

• Type of vulnerability
• Full paths of source file(s) related to the manifestation of the vulnerability
• Location of the affected source code (tag/branch/commit or direct URL)
• Any special configuration required to reproduce the issue
• Step-by-step instructions to reproduce the issue
• Proof-of-concept or exploit code (if possible)
• Impact of the vulnerability, including how an attacker might exploit it

• We will acknowledge your email within 48 hours
• We will send a more detailed response within 7 days indicating the next steps
• We will work on a fix and coordinate a release timeline with you
• We will notify you when the vulnerability has been fixed

• Once a fix is released, we will publicly disclose the vulnerability
• We appreciate allowing us time to remediate before public disclosure
• We will credit you for responsible disclosure (unless you prefer to remain anonymous)

We support safe harbor for security researchers who:

• Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our services
• Do not exploit a security issue beyond the minimum needed to demonstrate it
• Report the vulnerability as soon as possible