Category: Governance & Administration

Security Finding Tracker

The vulnerability register: findings with evidence and reproduction steps, a remediation clock derived from severity, coordinated-disclosure dates for externally reported issues, the GDPR Art. 33 72-hour breach clock where personal data is implicated, and risk acceptance that always names the accepting human. Fixes link to the extension backlog so security work is prioritized in the same queue as everything else