If you discover a security vulnerability in ClawGuard, please report it responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

Instead, email: michno.jrg@gmail.com

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Acknowledgment: Within 48 hours
• Initial assessment: Within 1 week
• Fix release: As soon as possible, typically within 2 weeks

This policy applies to:

• The clawguard-core PyPI package
• Detection patterns (false negatives, bypasses)
• The ClawGuard Shield API (prompttools.co)
• The Python SDK (clawguard-shield on PyPI)

We credit security researchers in our release notes (unless you prefer to remain anonymous).