| Version | Supported |
|---|---|
| 0.4.x | ✅ |
| < 0.4 | ❌ |
If you discover a security vulnerability, please email:
security@pulse-protocol.org (placeholder - update before publishing)
We will respond within 48 hours.
Please do NOT open public issues for security vulnerabilities.
- HMAC-SHA256 message signing
- Replay protection (timestamp + nonce)
- Tamper detection
- Constant-time signature comparison
- Always verify signatures in production
- Use TLS for network transmission
- Rotate keys regularly
- Store keys securely (not in code)