A number of security measures are used including code scanning, secrets scanning, and Dependabot alerts.

Vulnerabilities can be reported privately to data@isaric.org.