| Version | Supported |
|---|---|
| 2.0.x | ✅ Current |
| 1.x.x | |
| < 1.0 | ❌ Unsupported |
If you discover a security vulnerability in this framework, please report it responsibly:
- DO NOT open a public GitHub issue for security vulnerabilities
- Email: site@hotmail.com with subject "SECURITY: [Brief Description]"
- Include: vulnerability description, reproduction steps, potential impact, and suggested fix
- You will receive an acknowledgment within 48 hours
- We will work with you to understand and address the issue
This framework provides security tools for authorized testing and hardening of ICS/OT environments only. Always:
- Obtain written authorization before scanning any network
- Test in development/lab environments before production deployment
- Follow your organization's change management procedures
- Ensure all testing complies with local laws and regulations
When using this framework:
- Run with minimum required privileges
- Store scan reports securely (they contain sensitive network data)
- Use environment variables for credentials, never hardcode
- Keep the framework and all dependencies updated
- Review generated firewall rules before applying to production