open-webui/docs/SECURITY.md

# Security Policy

Our primary goal is to ensure the protection and confidentiality of sensitive data stored by users on open-webui.

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| main    | :white_check_mark: |
| others  | :x:                |

## Reporting a Vulnerability

If you discover a security issue within our system, please notify us immediately via a pull request or contact us on discord.

## Product Security

We regularly audit our internal processes and system's architecture for vulnerabilities using a combination of automated and manual testing techniques.

We are planning on implementing SAST and SCA scans in our project soon.
Create SECURITY.md Hello Team, As the continued popularity of this project increases we should be taking our projects goals in mind with concerns to privacy and security. In the near future I would like to at least start testing the codebase with SAST(semgrep) and Synk.io (Software Composition Analysys) To highlight any potential weaknesses in the security of the product. I am happy to start contributing from the security side. 2024-01-24 16:08:49 +01:00			`# Security Policy`

rename to open-webui 2024-02-17 08:30:38 +01:00			`Our primary goal is to ensure the protection and confidentiality of sensitive data stored by users on open-webui.`

			`## Supported Versions`
Create SECURITY.md Hello Team, As the continued popularity of this project increases we should be taking our projects goals in mind with concerns to privacy and security. In the near future I would like to at least start testing the codebase with SAST(semgrep) and Synk.io (Software Composition Analysys) To highlight any potential weaknesses in the security of the product. I am happy to start contributing from the security side. 2024-01-24 16:08:49 +01:00
			`\| Version \| Supported \|`
			`\| ------- \| ------------------ \|`
rename to open-webui 2024-02-17 08:30:38 +01:00			`\| main \| :white_check_mark: \|`
			`\| others \| :x: \|`
Create SECURITY.md Hello Team, As the continued popularity of this project increases we should be taking our projects goals in mind with concerns to privacy and security. In the near future I would like to at least start testing the codebase with SAST(semgrep) and Synk.io (Software Composition Analysys) To highlight any potential weaknesses in the security of the product. I am happy to start contributing from the security side. 2024-01-24 16:08:49 +01:00
			`## Reporting a Vulnerability`

			`If you discover a security issue within our system, please notify us immediately via a pull request or contact us on discord.`

			`## Product Security`
rename to open-webui 2024-02-17 08:30:38 +01:00
Create SECURITY.md Hello Team, As the continued popularity of this project increases we should be taking our projects goals in mind with concerns to privacy and security. In the near future I would like to at least start testing the codebase with SAST(semgrep) and Synk.io (Software Composition Analysys) To highlight any potential weaknesses in the security of the product. I am happy to start contributing from the security side. 2024-01-24 16:08:49 +01:00			`We regularly audit our internal processes and system's architecture for vulnerabilities using a combination of automated and manual testing techniques.`

			`We are planning on implementing SAST and SCA scans in our project soon.`