Security

SECURITY.md

Security Policy

Responsible Disclosure

Contact: security@meridian.io
Preferred encryption: PGP on request
Acknowledgement target: 72 hours
Initial triage target: 5 business days

Bug Bounty (Pilot)

Scope: Collector API endpoints and authentication/tenant-isolation controls
Safe harbor for good-faith research within scope

There aren’t any published security advisories