Blitz Strike is an authorized security research tool. It must only be used against systems you own or have explicit written permission to test.

If you discover a vulnerability in Blitz Strike itself, please report it privately before opening a public issue.

Open a private security advisory on GitHub, or contact the maintainer directly. Include:

• A clear description of the issue.
• Steps to reproduce (minimal, self-contained).
• The affected version and platform.

Do not include live credentials, customer data, or exploit code against third-party systems in a report.

This policy covers vulnerabilities in the Blitz Strike codebase and its bundled data layers. It does not cover:

• Vulnerabilities in third-party tools the catalog references (report those upstream).
• Misuse of the tool against unauthorized targets.

This tool is provided for educational and authorized security research only.
Do not use against systems without explicit permission from the owner.

Any use against unauthorized targets is a violation of the license and may be illegal. The maintainer is not responsible for misuse.