There a 2 different documents regarding security:

- [Project Security](project/security.md) addresses security measures taken by the InvenTree project around the code base and the project itself
- [Threat Model](concepts/threat_model.md) describes the assumptions made regarding running an instance of InvenTree

The official [Security Policy]({{ sourcefile("SECURITY.md") }}) is available in the code repository.