# Security Policy

## Reporting a Vulnerability
We take the security of this project seriously. If you believe you have found a security vulnerability, please do not open a public issue. Instead, please report it privately to the maintainer.

Reports can be sent to:
* Primary: mail@amit.is-a.dev
* Secondary: amitdutta4255@gmail.com

Please include a detailed description of the vulnerability, steps to reproduce, and any potential impact. We will acknowledge receipt of your report within 48 hours and provide a timeline for resolution.

## Scope
This policy applies to all repositories under the OSMA organization/project, including the frontend explorers and the FastAPI backend scripts.