Skip to content

Security: searchwork/nwt-reading

SECURITY.md

Security Policy - NWT Reading

This document outlines the security policies and procedures for NWT Reading. We are committed to ensuring the security and integrity of our app and user data.

Supported Versions

Only the latest stable version of NWT Reading receives active security updates. We strongly recommend using the most recent version available on the respective app stores.

Reporting a Security Vulnerability

If you discover a security vulnerability in NWT Reading, please report it to us immediately.

Please do NOT disclose security vulnerabilities publicly until they have been addressed.

To report a vulnerability, please follow these steps:

  1. Email us: Send an email to [[email protected]] with the following information:
  • Subject: Security Vulnerability Report - NWT Reading
  • Detailed description of the vulnerability, including steps to reproduce it.
  • Affected versions of NWT Reading (specify platform: Android, iOS, etc.).
  • Potential impact of the vulnerability.
  • Your contact information (optional, but appreciated).
  1. Confirmation: We will acknowledge receipt of your report within 7 business days and provide an estimated timeline for addressing the issue.

Vulnerability Handling Process

  1. Triage: Our security team will review and triage the reported vulnerability to assess its severity and impact.
  2. Investigation: We will investigate the vulnerability to understand its root cause and develop a fix.
  3. Fix Development: We will develop and test a patch to address the vulnerability within the Flutter codebase and platform specific code.
  4. Release: We will release a new version of NWT Reading containing the security fix through the respective app stores.
  5. Disclosure: We will publicly disclose the vulnerability and its fix after the patch has been released and users have had sufficient time to update.

Security Best Practices for NWT Reading Users

We encourage all users of NWT Reading to follow these security best practices:

  • Keep your app up to date: Regularly update NWT Reading to the latest version via the app stores.
  • Secure your device: Follow best practices for securing your mobile device, including using a strong passcode or biometric authentication.
  • Be cautious of phishing: Be wary of suspicious emails or messages that claim to be from NWT Reading.
  • Report suspicious activity: If you notice any suspicious activity within the app or related to your account, please report it to us immediately.

Responsible Disclosure

We appreciate responsible disclosure of security vulnerabilities. We are committed to working with security researchers to address vulnerabilities in a timely and responsible manner.

Contact

If you have any questions or concerns about our security policy, please contact us at [[email protected]].

Changes to this Policy

This security policy may be updated from time to time. We will notify users of any significant changes, potentially through in-app notifications or updates to this document on our website.

There aren’t any published security advisories