Edge Proxy is currently experimental and has not completed an independent security audit. Do not treat it as a production-ready security boundary.

Do not report suspected vulnerabilities in a public issue. Use GitHub's private vulnerability reporting:

https://github.com/ktrubilo9/edge-proxy/security/advisories/new

Include the affected commit, reproduction steps, potential impact, and a suggested mitigation when possible. Do not include real credentials, private traffic, or third-party secrets.

General hardening ideas that do not disclose a vulnerability can be submitted as regular feature requests.