Security policy

Report a suspected vulnerability privately to contact@qualitymax.io. Include the affected repository or product, version, impact, and a concise reproduction using a controlled example. Do not include live credentials or customer data, and do not open a public issue containing sensitive details.

We will coordinate investigation and disclosure with you. Avoid accessing or changing other users' data. A repository-specific security policy takes precedence over the organization default.

For ordinary bugs and documentation feedback, use the repository issue tracker. Product guidance is available at docs.qualitymax.io.