For runtime data, permissions, MFT filename visibility, process actions and the optional privileged service, read Security and privacy.

Use GitHub private vulnerability reporting when available. Include the affected version, Windows build, backend and a minimal reproduction without private paths or credentials. Do not put sensitive reproductions in a public issue. If private reporting is unavailable, open a non-sensitive issue asking the maintainer for a private contact channel.

The current published release is v0.2.0. v1.0.0 remains an unreleased candidate; no maintenance lifetime or third-party security certification is implied.