We take security seriously

• Whilst we are confident in the safety of the code, no system is risk-free. Nearly all software has bugs. Use your best judgement before storing highly confidential information in ITFlow.
• We attempt to follow security best practices where possible, including automated code scanning.
• 

We operate a rolling release model. Any bug fixes will be released into latest version of ITFlow, so you must stay up-to-date.

Security contact: GitHub Security Advisories

If you have discovered a security issue, please report it to us in as much detail as possible, so we can fix it.

You should expect to receive an initial acknowledgement within 72 hours. If you don't receive any feedback, we may have missed the initial email from GitHub (we're human!). Please raise a forum discussion quoting ONLY the assigned GHSA ref.