# Security Policy

## Reporting a Vulnerability

Do NOT open a public GitHub issue for a security vulnerability.

Report suspected vulnerabilities privately through one of:

- **Primary**: [GitHub Security Advisories](https://github.com/solana-foundation/solana-developer-platform/security/advisories/new)
- **Email fallback**: disclosures@solana.org

Provide a helpful title and detailed description of the problem.
Expect a response as fast as possible in the advisory, typically within 72 hours.

If you do not receive a response in the advisory, send an email to disclosures@solana.org with the full URL of the advisory you have created. DO NOT include attachments or provide detail sufficient for exploitation regarding the security issue in this email. Only provide such details in the advisory.
