Skip to content

Security: Scayar/ScayOSINT

Security

SECURITY.md

Security Policy

Supported Versions

We currently support the following versions of ScayOSINT with security updates:

Version Supported
3.0.x
< 3.0

Reporting a Vulnerability

We take the security of ScayOSINT seriously. If you believe you have found a security vulnerability, please follow these steps:

  1. Do Not disclose the vulnerability publicly
  2. Do Not open a public GitHub issue
  3. Email your findings to scayar.exe@gmail.com with:
    • Subject: "Security Vulnerability Report - ScayOSINT"
    • Description of the vulnerability
    • Steps to reproduce
    • Potential impact
    • Any suggested fixes (if available)

What to Expect

  • You will receive an acknowledgment within 48 hours
  • We will investigate and keep you updated on our progress
  • Once fixed, we will:
    • Credit you in the security advisory (if desired)
    • Add you to our Security Hall of Fame
    • Release a patch as soon as possible

Security Best Practices

When using ScayOSINT:

  1. Always use the latest version
  2. Keep your API keys secure
  3. Use environment variables for sensitive data
  4. Enable encryption for saved results
  5. Use a proxy when necessary

Security Hall of Fame

We would like to thank the following security researchers for their contributions:

  • [Your name will be added here]

Updates

This security policy will be updated as needed. Last updated: [Current Date]

There aren’t any published security advisories