OpenWard is a network-observability and policy-enforcement project. Treat it as security-sensitive software.

If you discover a vulnerability, do not open a public issue with exploit details.

Report the issue privately to the project maintainers with:

• A short description
• Affected component or file
• Reproduction steps
• Impact assessment
• Suggested mitigation if available

• We will validate the report and reproduce it when possible.
• We will prioritize issues that expose network data, bypass policy decisions, or allow unsafe remote control of the service.
• We will coordinate disclosure timing with the reporter when a fix is required.

The highest-risk areas in this repository are:

• Log ingestion and parsing
• Device classification and policy evaluation
• Rule compilation and inline enforcement
• Service management and default network exposure

• Do not expose the controller API to the public internet.
• Keep the controller bound to 127.0.0.1 during local testing unless you intentionally need remote access.
• Run in observe mode first on real networks.
• Review resolver logs and baselines before enabling stronger policy modes.