Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
79 changes: 79 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,79 @@
# Security Policy

## 📌 Project: Zecrypt Labs

Zecrypt Lab is a zero-knowledge, end-to-end encrypted password manager designed with privacy and user data security as its top priorities. We take security issues seriously and appreciate responsible disclosures that help us improve the application for everyone.

---

## 🔐 Supported Versions

We actively maintain and patch security issues in the following versions:

| Version | Supported |
|---------|-----------|
| Latest | ✅ |


If you're not using the latest version, we recommend upgrading as soon as possible.

---

## 📣 Reporting a Vulnerability

If you discover a security vulnerability in Secrets Lab, please **do not create a public GitHub issue**. Instead, report it privately to ensure the safety of our users:

- **Email**: `contact@zecrypt.io`

When reporting a vulnerability, please include:

- A clear and concise description of the issue.
- Steps to reproduce (if possible).
- Any potential impact or exploitation scenarios.
- Suggestions for a fix (if applicable).

We aim to respond to security reports **within 72 hours** and provide updates as we work toward a resolution.

---

## 🔄 Vulnerability Handling Process

1. **Initial Acknowledgement** (within 48 hours).
2. **Verification & Impact Analysis**.
3. **Patch Development** and coordinated disclosure.
4. **Security Advisory Release** via GitHub and official channels.

---

## 🛡️ Security Features

Secrets Lab is designed with security at its core:

- **Zero-Knowledge Architecture**: We do not have access to your passwords or encryption keys.
- **End-to-End Encryption**: All data is encrypted client-side before being sent to the server.
- **No Raw Data Storage**: We never log or store unencrypted secrets.
- **Automatic Logout & Session Expiry**
- **Rate Limiting & Brute-force Protection**

---

## 🧪 Responsible Disclosure Rewards

We’re currently not offering monetary bounties, but all valid disclosures will be publicly credited (if desired) in our **Security Hall of Fame**.

---

## 🙌 Acknowledgments

We thank all security researchers and ethical hackers who help improve Secrets Lab. Your contributions help us build a safer digital future.

---

## 📄 License

This project is open-source and available under the [custom license](./LICENSE), restricting commercial use. Please respect its terms when contributing or reusing.

---

Stay safe,
**The Zecrypt Labs Team**
16 changes: 16 additions & 0 deletions packages/frontend-web/app/[locale]/dashboard/environments/page.tsx
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
"use client";

import { DashboardLayout } from "@/components/dashboard-layout";
import { EnvContentWrapper } from "@/components/env-content-wrapper";
import { use } from "react";

export default function EnvPage({ params }: { params: Promise<{ locale: string }> }) {
// Properly unwrap the params Promise using React.use
const { locale } = use(params);

return (
<DashboardLayout locale={locale}>
<EnvContentWrapper />
</DashboardLayout>
);
}
2 changes: 1 addition & 1 deletion packages/frontend-web/components/project-dialog.tsx
Original file line number Diff line number Diff line change
Expand Up @@ -251,7 +251,7 @@ const featureMenuItems: {
{
key: "env",
labelKey: "env",
path: "/dashboard/env",
path: "/dashboard/environments",
icon: (
<svg
xmlns="http://www.w3.org/2000/svg"
Expand Down
2 changes: 1 addition & 1 deletion packages/frontend-web/components/sidebar-nav.tsx
Original file line number Diff line number Diff line change
Expand Up @@ -183,7 +183,7 @@ const navigationCategories: NavigationCategory[] = [
{
key: "env",
labelKey: "env_variables",
path: "/dashboard/env",
path: "/dashboard/environments",
icon: (
<svg
xmlns="http://www.w3.org/2000/svg"
Expand Down
Loading