The VidGen maintainers take the security of our platform and user data seriously. We appreciate the responsible disclosure of security vulnerabilities by security researchers and open-source developers.

If you discover a security vulnerability in VidGen:

1. Do NOT open a public GitHub issue.
2. Email your findings confidentially to security@vidgenerator.ai.
3. Include:
   • Type of vulnerability (e.g. SQL Injection, XSS, SSRF, Broken Auth)
   • Step-by-step proof of concept (PoC) to reproduce
   • Potential impact of the issue

• Acknowledgement: We will acknowledge receipt of your report within 48 hours.
• Triage & Patching: We will investigate and publish a patch within 14 days for critical vulnerabilities.
• Credit: We will publicly credit your contribution in the security advisory release notes.