We take the security of Kontorfix seriously. Thank you for reporting vulnerabilities responsibly.

Please report security issues privately by email to security@noix.dev — not through public GitHub issues.

To help us respond quickly, please include:

• a description of the vulnerability and its potential impact,
• step-by-step reproduction instructions (proof of concept),
• the affected version/commit and environment.

• Initial response: typically within 3 business days.
• We confirm receipt, assess the report and keep you updated on progress.
• Once a fix is ready, we coordinate disclosure with you. On request, we credit you as the reporter.

Please give us reasonable time to fix the issue before any details are made public.

Security updates are provided for the main branch.