# Security policy
To report a security vulnerability in Hivehook, email security@hivehook.com.
Please do not open a public issue.
## What to include
- Affected component and version (e.g. `sdk-rust 0.1.0`)
- Reproduction steps or proof-of-concept
- Impact assessment
## What to expect
- Initial acknowledgment within 48 hours
- Severity triage within 7 days
- Fix and disclosure timeline communicated after triage
We will publicly credit you in the security advisory unless you ask to stay anonymous.
## Supported versions
Hivehook is in beta. We patch security issues in the latest released version of each component (server image, SDKs, Terraform provider). Older beta versions do not receive backported fixes.