Skip to content

TirrenoTechnologies/tirreno

Tirreno - User analytics for sovereign cybersecurity: from insider threats to fraud prevention and beyond.

Reporting a security issue

If you've found a security-related issue with Tirreno, please email [email protected]. Submitting to GitHub makes the vulnerability public, making it easy to exploit. We'll do a public disclosure of the security issue once it's been fixed.

After receiving a report, Tirreno will take the following steps:

  • Confirmation that the issue has been received and that it's in the process of being addressed.
  • Attempt to reproduce the problem and confirm the vulnerability.
  • Release a new version of all the affected versions.
  • Prominently announce the problem in the release notes.
  • If requested, give credit to the reporter.

License

This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License (AGPL) as published by the Free Software Foundation version 3.

The name "Tirreno" is a registered trademark of Tirreno Technologies Sàrl, and Tirreno Technologies Sàrl hereby declines to grant a trademark license to "Tirreno" pursuant to the GNU Affero General Public License version 3 Section 7(e), without a separate agreement with Tirreno Technologies Sàrl.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License along with this program. If not, see GNU Affero General Public License v3.