securityonion/SECURITY.md

Security Policy

Supported Versions

Version	Supported
2.4.x	✅
2.3.x	✅
16.04.x	❌

Security Onion 16.04 has reached End Of Life and is no longer supported.

Reporting a Vulnerability

If you have any security concerns regarding Security Onion or believe you have uncovered a vulnerability, please follow these steps:

• send an email to security@securityonion.net
• include a description of the issue and steps to reproduce
• please use plain text format (no Word documents or PDF files)
• please do not disclose publicly until we have had sufficient time to resolve the issue

This security address should be used only for undisclosed vulnerabilities. Dealing with fixed issues or general questions on how to use Security Onion should be handled via the normal support channels.