From 1b64f7a46e36df49ff349bf972d4252ef29080fd Mon Sep 17 00:00:00 2001
From: "Evgeny @ SimpleX Chat"
 <259188159+evgeny-simplex@users.noreply.github.com>
Date: Sat, 14 Nov 2026 16:55:08 +0000
Subject: [PATCH] blog: Trail of Bits security audit permalink (#8206)

* blog: Trail of Bits security audit permalink

* blog: fixes in previous versions, no section placeholders

* blog: Anthropic OSS Scanner program

* blog: using frontier models

* blog: OSS Scanner program that uses frontier models

* blog: upgrade to v7.1.4+

* blog: fixes in SimpleX Chat apps

* blog: fixes in SimpleX Chat app

* blog: fixes first

* blog: security process line

* blog: OSS Scanner in the security process line only

* blog: links to Trail of Bits and OSS Scanner
---
 ...rity-audit-trail-of-bits-security-process.md | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 blog/20261121-simplex-chat-security-audit-trail-of-bits-security-process.md

diff --git a/blog/20261121-simplex-chat-security-audit-trail-of-bits-security-process.md b/blog/20261121-simplex-chat-security-audit-trail-of-bits-security-process.md
new file mode 100644
index 0000000000..d5794e2184
--- /dev/null
+++ b/blog/20261121-simplex-chat-security-audit-trail-of-bits-security-process.md
@@ -0,0 +1,17 @@
+---
+layout: layouts/article.html
+title: "SimpleX Chat Security Audit by Trail of Bits and Our Security Process"
+date: 2026-11-21
+draft: true
+permalink: "/blog/20261121-simplex-chat-security-audit-trail-of-bits-security-process.html"
+---
+
+# SimpleX Chat Security Audit by Trail of Bits and Our Security Process
+
+**To be published:** Nov 21, 2026
+
+This is a permalink for a blog post about:
+
+- the fixes in SimpleX Chat app - please upgrade to v7.1.4+, and ask your contacts to upgrade too.
+- the new security audit of SimpleX Chat apps and SimpleX Network protocols by [Trail of Bits](https://www.trailofbits.com/about/).
+- our security process: how we manage security reports, Anthropic's [OSS Scanner](https://red.anthropic.com/oss-scanner/), and vulnerability disclosure process.