If you discover a security vulnerability in PhishSentinel, please report it responsibly.

When reporting a vulnerability, include:

• Description of the issue
• Steps to reproduce
• Potential impact
• Suggested mitigation (if available)

Please avoid publicly disclosing security vulnerabilities until they have been reviewed.

PhishSentinel is a defensive cybersecurity toolkit designed to analyze:

• URLs
• Websites
• Email files (.eml)
• Domains
• Files

The project is intended for phishing detection and security analysis only.

It does not perform:

• Exploitation
• Malware execution
• Credential harvesting
• Network attacks
• Privilege escalation
• Unauthorized access
• Offensive security operations

Use PhishSentinel only for:

• Systems you own
• Systems you have explicit permission to assess
• Publicly accessible resources for educational purposes
• Security awareness, research, and training

Users are responsible for ensuring that all activities comply with applicable laws, regulations, and organizational policies.

PhishSentinel uses several open-source Python libraries, including:

• requests
• beautifulsoup4
• tldextract
• validators
• dnspython
• python-whois
• colorama

Keep dependencies up to date by running:

pip install --upgrade -r requirements.txt

PhishSentinel is developed with the following principles:

• Modular architecture
• Rule-based phishing detection
• Input validation
• Exception handling
• Activity logging
• Readable and maintainable code
• No hardcoded secrets
• No embedded API keys

PhishSentinel is provided for educational and defensive cybersecurity purposes only.

The software is distributed without any warranty. Users are solely responsible for ensuring that it is used legally, ethically, and in compliance with all applicable laws.

For security-related questions or responsible vulnerability disclosure, please contact the project maintainer through GitHub.