Skip to content

Security: vikrant-project/Storage-Detective

Security

SECURITY.md

Security Policy

Supported Versions

Only the latest release of Storage Detective is supported with security updates:

Version Supported
1.0.x ✅

Reporting a Vulnerability

We take the security and privacy of our users seriously. If you discover a potential security or privacy flaw:

  1. Do not create a public GitHub issue.
  2. Email your findings and reproduction steps to security@storagedetective.app (or submit a confidential security advisory via GitHub Security Advisories).
  3. We will acknowledge receipt within 48 hours and work with you to validate and remediate the issue.

Security Guarantees & Constraints

  • Zero Private APIs: Storage Detective strictly uses documented, public Apple APIs.
  • No Insecure Temp Files: File operations avoid insecure world-readable temporary locations.
  • No Hardcoded Secrets: This repository does not commit certificates, provisioning profiles, private keys, or API tokens.
  • Biometric Protection: The app lock leverages Apple's LocalAuthentication framework and iOS Secure Enclave.

There aren't any published security advisories