BeakWatch currently maintains the latest code on the main branch. Security fixes are not backported to older releases unless a release announcement says otherwise.

Please use GitHub's Report a vulnerability feature in the repository's Security tab. Do not open a public issue for an undisclosed vulnerability. Include reproduction steps, affected routes or versions, impact, and any suggested mitigation. Please allow maintainers a reasonable opportunity to investigate before public disclosure.

BeakWatch is designed for a trusted local network. It does not provide user authentication, and configured BirdNET-Go servers may themselves expose sensitive location or recording data. Do not expose BeakWatch directly to the public internet.

For broader network access, place it behind an authenticated HTTPS reverse proxy and restrict access to trusted users. Treat server/.env as sensitive, especially when it contains private addresses or an Open-Meteo API key.