Skip to content

Security: Apt-Security-Management/apt-flow-down-letter

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this application, please report it responsibly.

Contact: security@aptsecuritymanagement.com

Please include:

  • Description of the vulnerability
  • Steps to reproduce
  • Potential impact

We will acknowledge your report within 48 hours and aim to resolve confirmed vulnerabilities within 30 days.

Scope

This is a 100% client-side static application. It processes no data on any server. All user inputs remain in the browser.

Known Security Posture

  • No server-side processing
  • No cookies or tracking
  • localStorage used only for in-progress form state
  • No eval, new Function, or dynamic code execution
  • All user inputs rendered via React's default escaping
  • Dependency audit maintained via npm audit

There aren't any published security advisories