# Security Policy

## Reporting vulnerabilities

If you discover a security vulnerability, please report it privately by emailing security@paseo.sh. Do not open a public issue.

We will acknowledge your report within 48 hours and work with you to understand and resolve the issue.

## Security documentation

For information about Paseo's security architecture, threat model, and best practices, see [paseo.sh/docs/security](https://paseo.sh/docs/security).