We actively monitor and support security patches for the following versions:

We take the security of our compliance landing zones seriously. If you find a security vulnerability, configuration error, or potential IAM privilege escalation vector in Aegis, please do not open a public GitHub issue. Instead, follow these steps to report it responsibly:

1. Email the Report: Send a detailed email to the project maintainer at mustafauelker@gmail.com (or submit via GitHub private vulnerability reporting if active).
2. Details to Include:
   • A clear description of the vulnerability or privilege escalation vector.
   • Step-by-step instructions (or a proof-of-concept configuration) to reproduce the issue.
   • The potential regulatory impact under DORA / BaFin standards.
3. Response Time: We will acknowledge receipt of your vulnerability report within 48 hours and work with you to coordinate a public security release patch.