# Security Policy

## Reporting a Vulnerability

If you've found a security issue that you'd like to disclose confidentially please send email to security@mail.kubevela.io .

### Who Reads Email Sent to security@mail.kubevela.io?

Only a restricted and carefully chosen group of KubeVela maintainers will have access to material sent to the security@mail.kubevela.io address.
No outside users can subscribe to this list.

### What to Send to security@mail.kubevela.io

Please provide as much information about your system and the issue as possible when contacting the list.

## How We Respond

Email sent to security@mail.kubevela.io is read and acknowledged with a non-automated response within three working days.
For issues that are complicated and require significant attention,
we will open an investigation and will provide you with a mechanism to check the status of our progress at any time.