| # Security Policy | |
| ## Supported Versions | |
| Currently, Kimi Code only provides security support for the latest released version. | |
| ## Reporting a Vulnerability | |
| We take security seriously. **Please do not open a public issue for security vulnerabilities.** | |
| Preferred channel: | |
| - GitHub Security Advisories — https://github.com/MoonshotAI/kimi-code/security/advisories/new | |
| (private disclosure, tracked with the codebase) | |
| Alternative channel: | |
| - Email: code@moonshot.ai (please include "[security]" in the subject) | |
| ## What to Include | |
| - Affected version (output of `kimi --version`) | |
| - Reproduction steps | |
| - Impact assessment | |
| - Any suggested mitigation | |
| ## Our Response | |
| We will acknowledge your report and provide an initial assessment as soon as we can. | |
| ## Public Disclosure | |
| We will coordinate with you on disclosure timing once a fix is ready. | |