Skip to content

Repository navigation

Security: Aaks-hatH/planit

Security

Report a vulnerability

Security.md

Security Policy

Proprietary Software — Not Open Source

PlanIt is proprietary software. This repository is published for transparency only. It is not open-source and is not licensed for forking, copying, modification, deployment, or redistribution.

Forking or cloning this repository does not grant any rights to use, modify, or distribute the code. See LICENSE for full terms.

Reporting a Security Vulnerability

If you discover a security vulnerability in PlanIt, please do not open a public GitHub issue. Public disclosure before a fix is in place puts all PlanIt users at risk.

Report vulnerabilities privately to:

planit.userhelp@gmail.com
Subject line: [SECURITY] Vulnerability Report — <brief description>

Please include:

  • A clear description of the vulnerability
  • Steps to reproduce it
  • The potential impact (what an attacker could do)
  • Any proof-of-concept code or screenshots (if applicable)

We will acknowledge your report within 48 hours and aim to issue a fix or mitigation within 14 days for critical issues.

Scope

The following are in scope for security reports:

  • The hosted service at planitapp.onrender.com
  • Authentication and authorization bypasses
  • Data exposure or exfiltration vulnerabilities
  • XSS, CSRF, SQLi, or injection vulnerabilities in the hosted service

The following are out of scope:

  • Vulnerabilities in self-hosted deployments (self-hosting is not permitted)
  • Social engineering attacks
  • Denial of service via volumetric traffic
  • Reports generated by automated scanners without manual validation

Unauthorized Security Testing

Penetration testing, fuzzing, or automated vulnerability scanning of the PlanIt hosted service or infrastructure is strictly prohibited without explicit written authorization from the author. Unauthorized testing constitutes a violation of the PlanIt license agreement and may violate applicable computer fraud laws.

Intellectual Property Violations

If you become aware of an unauthorized fork, deployment, or redistribution of PlanIt source code, please report it to:

planit.userhelp@gmail.com
Subject line: License Violation Report

© 2026 Aakshat Hariharan. All Rights Reserved.
PlanIt is proprietary software. Unauthorized use is strictly prohibited.

There aren't any published security advisories