If you discover a security vulnerability in PtahCode, please report it responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

Instead, please email: security@ptah.live

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Initial Assessment: Within 1 week
• Fix & Disclosure: Coordinated with reporter

This policy applies to:

• The PtahCode desktop application (Electron)
• The PtahCode website (ptah.live)

• Third-party dependencies (report to the respective maintainer)
• Social engineering attacks
• Denial of service attacks