Skip to content

Security: VCVinh/VOffense

Security

SECURITY.md

Security Policy & Vulnerability Disclosure

Supported Versions

VOffense actively maintains and supports security patches for the following versions:

Version Supported
1.2.x ✅
1.1.x ✅
1.0.x ✅

Reporting a Vulnerability

The VOffense team takes high-assurance security seriously. If you discover a security vulnerability, flaw in our formal verification models, or implementation bug:

  1. Do not open a public issue.
  2. Please submit your vulnerability disclosure via email to: security@voffense.io (or initiate a GitHub Private Vulnerability Report).
  3. Include detailed reproduction steps, formal proof constraints, or minimal PoC scripts.
  4. Our security research team will acknowledge your report within 24 hours and provide regular status updates during remediation.

Cryptographic Agility & Formal Assurance Commitments

  • Post-Quantum Security: All key exchange mechanisms adhere strictly to NIST FIPS 203 (ML-KEM) and CNSA 2.0 quantum-resistant guidelines.
  • Clean-Room Assurance: Native implementations undergo automated invariant checks on every commit via our continuous verification test suites.

There aren't any published security advisories