If you discover a security vulnerability in AIVersus, please report it responsibly:
- Email: Open an issue on the GitHub repository with the label
security - Do not disclose the vulnerability publicly until it has been addressed
When deploying AIVersus:
- Never commit your
.envfile — it contains API keys and database passwords - Change the default database password in
docker-compose.ymlfor production deployments - Use HTTPS behind a reverse proxy (e.g., Nginx) in production
- Keep dependencies updated — run
pip install --upgradeperiodically