| Version | Supported |
|---|---|
| 1.2.x | ✅ Active |
| 1.1.x | |
| < 1.1.0 | ❌ End of life |
Do NOT open public issues for security vulnerabilities.
- Email: security@synapselayer.org
- Response: 48 hours
- AES-256-GCM encryption at rest
- Header-first auth (
x-connect-token) - Tokens never in URLs or logs
- CI secret scanning on every commit
- PII redaction pipeline
- Zero-knowledge: server never sees plaintext