Skip to content

Security: ExceedsGroup/company-standards

Security

SECURITY.md

Security Policy

Supported Scope

This repository contains governance standards and policy documents for Exceeds Group and operating companies.

Responsible Disclosure

If you identify a security issue in this repository or related standards implementation:

  • Do not disclose publicly before coordinated review
  • Provide a clear description of the issue and potential impact
  • Include reproduction steps and any affected repositories, if known

Reporting Contact

  • security@exceedsgroup.com

Response Process

  • Acknowledge receipt within 5 business days
  • Assess severity and scope
  • Coordinate remediation owners and timelines
  • Publish relevant updates to impacted internal stakeholders
  • Handle sensitive details on a need-to-know basis until remediation is complete

Out of Scope

  • General product support requests
  • Non-security editorial feedback (use standard issue workflow)

There aren’t any published security advisories