If you discover a security vulnerability in CTIAS Lab, please report it responsibly:

1. DO NOT open a public GitHub issue
2. Email: contact@pangerlkr.link
3. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if available)

• 24-48 hours: Initial acknowledgment
• 5-7 days: Assessment and patch development
• 14 days: Security patch release
• 30 days: Public disclosure

• Keep CTIAS Lab updated to the latest version
• Run in isolated lab environments only
• Never test external systems without authorization
• Use strong authentication credentials
• Enable all available security features
• Regularly audit logs and detections

• Follow secure coding practices
• Validate all inputs
• Use parameterized queries
• Implement principle of least privilege
• Keep dependencies updated
• Use approved cryptographic libraries
• Never hardcode secrets or credentials

CTIAS Lab is designed for educational and defensive purposes only:

• Not intended for production threat intelligence operations
• Lab environment may not handle production-scale data
• Some modules are intentionally simplified for learning
• Not suitable for processing classified information

Users are solely responsible for ensuring their use of CTIAS Lab complies with:

• Local, state, and federal laws
• Organizational policies and procedures
• Ethical standards and best practices
• MITRE ATT&CK ethical guidelines

The CTIAS Lab project and contributors assume no liability for misuse or damage caused by improper use of this tool.

• Security: security@nexuscipherguard.in
• General: contact@nexuscipherguard.in
• Twitter: @panger_lkr