This policy applies to every Solarity-AI repository that doesn't have its own SECURITY.md. It also covers solarityai.com, the Solarity AI apps (Looks Max, IQ Max, Sleep Max, and Fitness Max, listed as Only Fitness), and the SaaS products (Engineering Max, Management Max, and Marketing Max).

Please report security issues privately. Don't open a public issue.

• Preferred: use Report a vulnerability on the affected repository's Security tab
• Email: ata.turhan@solarityai.com with the subject Security report

Include the affected product, URL, or file, the steps to reproduce, and the impact.

• We'll confirm we received your report within 3 business days.
• We'll keep you updated until the issue is resolved.
• If you'd like, we'll credit you once a fix ships.

• Reports from automated scanners with no demonstrated impact
• Social engineering, physical attacks, and denial-of-service testing