We take the security of Golf seriously. If you believe you've found a security vulnerability, please follow these steps:

1. Do not disclose the vulnerability publicly or to any third parties.

2. Email us directly at founders@golf.dev with details of the vulnerability.

3. Include the following information in your report:

   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Any suggestions for mitigation

4. We will acknowledge receipt of your vulnerability report within 48 hours and provide an estimated timeline for a fix.

5. Once the vulnerability is fixed, we will notify you and publicly acknowledge your contribution (unless you prefer to remain anonymous).