This is a portfolio / demo project, not a hardened production system.

If you discover a security concern, please open a private report via GitHub Security Advisories on the repository, or contact the maintainer directly. Do not open public issues for undisclosed vulnerabilities.

Docker Compose uses default credentials (analytics / analytics) and plaintext Kafka listeners. Do not expose this stack to the public internet without hardening.

Out of scope for this demo: authentication, authorization, encryption at rest, secret management, network policies, and rate limiting.