# Hudra Security Policy

Please report suspected Hudra vulnerabilities privately by emailing
support@napper.au with the subject **Hudra security report**.

Include:

- the Hudra version and browser version;
- the affected feature;
- clear reproduction steps; and
- the potential security or privacy impact.

Do not include passwords, authentication details, student records or private
lesson content. Use a minimal synthetic example if content is needed to explain
the issue.

Please do not disclose a suspected vulnerability publicly before the Hudra
maintainers have had a reasonable opportunity to investigate and respond.