If you discover a security vulnerability in MODUS, please report it responsibly:

1. DO NOT open a public GitHub issue
2. Email us at: security@neurabytelabs.com
3. Include detailed information about the vulnerability
4. We'll respond within 48 hours

• All API keys and secrets are loaded via environment variables
• No hardcoded credentials in source code
• .env files are gitignored
• Only .env.example with placeholder values is committed

• Admin authentication uses environment-based passwords
• Production deployments require secure password setup
• Demo mode has appropriate access controls

• Regular dependency updates via Dependabot
• Security-focused Elixir/Phoenix ecosystem
• Docker images use official base images

• Local SQLite database for development
• Production data isolation
• No sensitive user data collection in demo mode

Only the latest major version receives security updates.

1. Keep your API keys secure - Never commit them to version control
2. Use environment variables - Follow the .env.example template
3. Update regularly - Stay on the latest supported version
4. Production setup - Use strong admin passwords in production
5. Network security - Use HTTPS in production deployments

For security-related questions: security@neurabytelabs.com

For general support: support@neurabytelabs.com