Skip to content

Vulnerability Management

ERP Plus continuously validates security posture.


Detection Tools

  • Brakeman
  • Dependabot

Reporting

Security issues should be reported privately.

Do not open public issues for active vulnerabilities.


Remediation Process

  1. Identify vulnerability
  2. Assess impact
  3. Create fix
  4. Validate through CI
  5. Release patch
  6. Document resolution

Severity Levels

  • Critical
  • High
  • Medium
  • Low