#Security policy

Nocap Cloud controls Docker on the servers where it runs, so we treat security reports as the top priority.

#Reporting a vulnerability

Do not open a public issue. Use GitHub's private vulnerability reporting: Security tab → Report a vulnerability on this repository.

Include what you found, how to reproduce it and the version you tested. We aim to reply within 3 working days and to agree on a disclosure date with you.

#Supported versions

Until v1.0, only the latest release gets security fixes.