If you discover a security vulnerability in Atlas, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, email: security@augustusotu.com

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Assessment: Within 1 week
• Fix: Depends on severity, typically within 2 weeks for critical issues

The following are in scope:

• Authentication bypass
• Rate limiting bypass
• Input validation issues (injection, overflow)
• Denial of service via API abuse
• Information disclosure via error messages