| # Reporting Security Issues |
| |
| The Bootstrap team and community take security issues in Bootstrap seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions. |
| |
| To report a security issue, email [security@getbootstrap.com](mailto:security@getbootstrap.com) and include the word "SECURITY" in the subject line. |
| |
| We'll endeavor to respond quickly, and will keep you updated throughout the process. We aim to acknowledge vulnerability reports within 3 business days and will coordinate disclosure timelines with reporters before publishing any details. |
| |
| For details on how we handle incidents, see our [Incident Response Plan](.github/INCIDENT_RESPONSE.md). |
