RitualDev Studio takes the security of autonomous AI infrastructure, secret defense runtimes, and developer tooling with utmost seriousness.

We actively provide security updates, regression patches, and zero-day mitigations for the following versions:

We commit to the following response timeline for all reported vulnerabilities:

• Initial Triage & Acknowledgment: < 24 Hours (guaranteed).
• Vulnerability Reproduction & Severity Assessment: < 48 Hours.
• Security Advisory Drafting & Patch Release: < 72 Hours for Critical/High CVEs.

Please DO NOT create public GitHub issues or discussions for undisclosed security vulnerabilities.

Submit a report privately via GitHub's Coordinated Vulnerability Disclosure: 👉 Report a Security Advisory on GitHub

Email our engineering response team:

• Email: developer@ritualdev.com
• Subject: [SECURITY VULNERABILITY] @ritualdev-lab/agentshield
• PGP Encryption: Available upon request.

Please include:

1. Proof-of-Concept (PoC) code or reproduction script.
2. Attack vector taxonomy (e.g. CWE-77, ReDoS, Sandbox Bypass, Proc Environ Exfiltration).
3. Impact assessment on host environment or client agent runtime.

RitualDev Studio will never pursue legal action against security researchers, ethical hackers, or academic teams who:

• Act in good faith to identify vulnerabilities.
• Provide us reasonable time to release a patch before public disclosure.
• Avoid accessing, destroying, or exfiltrating user data or production environments.

Researchers reporting verified vulnerabilities will be credited on our Security Hall of Fame.

For SOC 2 Type II, ISO 27001, and India DPDP Act 2023 compliance verification:

• Trust Portal: https://ritualdev.in/trust
• Interactive Playground: https://ritualdev.in/playground