If you find a security vulnerability, please report it privately - do not open a public issue.

1. Do NOT create a public GitHub issue
2. Open a discussion with "Security" tag
3. Or contact maintainer directly

Response time: Within 48 hours

Vant includes:

• VAF - Input validation (path traversal, command injection, script injection)
• Rate Limiting - 60 requests/min, 1000/hour
• Secret Handling - Environment variables preferred

• Set strong API keys
• Use environment variables for secrets
• Enable audit logging
• Monitor .audit.log

See Security Guide for full technical details.

##感谢

Thank you for helping keep Vant secure!