Security Policy

Last updated: October 2026

Scope

This policy covers the hosted GradeDescent service at gradedescent.com and the main branch of our repositories.

Reporting a Vulnerability

If you discover a security vulnerability in any GradeDescent project:

1. Do not open a public GitHub issue.
2. Email us directly at security@gradedescent.com with:
   • A description of the vulnerability
   • Steps to reproduce the issue
   • Any potential impact or affected components

We will acknowledge your report within 48 hours and follow up with a timeline for remediation.

Disclosure Policy

• We aim to resolve and disclose confirmed vulnerabilities responsibly.
• Public disclosure will occur only after a fix or mitigation is available.
• Credit will be given to security researchers who responsibly report issues.

Thank you for helping keep GradeDescent secure!