Skip to content

Security: MichaelAdamGroberman/claude-dev-hardware

SECURITY.md

Security Policy

This is claude-dev-hardware, a hobbyist fork of Anthropic's claude-desktop-buddy ESP32 firmware. It is provided as-is under the MIT license (see LICENSE), with no warranty. Security reports are handled on a best-effort basis.

Reporting a vulnerability

Please report security issues privately — do not open a public issue for a vulnerability.

You can report through any of:

When reporting, please include enough detail to reproduce the issue (affected component, steps, and impact) so it can be assessed quickly.

Coordinated disclosure

Please give a reasonable opportunity to investigate and address the issue before any public disclosure. Fixes and responses are best-effort, as time allows.

Scope

This policy covers the firmware and tooling in this repository. The BLE wire protocol itself is documented in REFERENCE.md and originates upstream; issues in the Claude desktop applications should be reported to Anthropic.

There aren't any published security advisories