# Security Policy

## Supported release

Security fixes are provided for the latest MasterDesk release only.

## Reporting a vulnerability

Please use GitHub's private vulnerability reporting for this repository:

`Security` → `Advisories` → `Report a vulnerability`

Do not open a public issue with credentials, machine identifiers, access
tokens, private network details, exploit code, or personal data.

Include:

- the affected MasterDesk version;
- Windows version and architecture;
- reproducible steps;
- expected and actual behavior;
- impact and suggested remediation, if known.

You should receive an initial response within seven days. Publication and
credit will be coordinated after a fix is available.

## Scope

The project does not accept requests to add covert access, bypass consent,
disable endpoint protection, evade operating-system warnings, or conceal
remote-control activity.
