create SECURITY.md file

1 files changed, 33 insertions, 0 deletions

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..b7e2b73
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,33 @@
+# Security Policy
+
+## Supported Versions
+
+This section outlines which versions of the project are currently receiving
+security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.x     | :white_check_mark: |
+| < 1.0   | :x:                |
+
+## Reporting a Vulnerability
+
+If you discover a vulnerability, please follow the guidelines below to report
+it:
+
+1. **Submission**: Send your vulnerability report to [[email protected]].
+   Please include a detailed description of the issue, steps to reproduce it,
+   and any relevant context.
+
+2. **Response Time**: We aim to acknowledge reports within **3 business days**.
+   You will receive updates on the status of your report throughout the process.
+
+3. **Acceptance Criteria**: If the vulnerability is confirmed, we will provide
+   you with an estimated timeline for resolution and keep you informed of any
+   updates until the issue is resolved.
+
+4. **Declined Reports**: If a reported vulnerability is deemed invalid or out of
+   scope, we will notify you of our decision and provide reasoning for the
+   decline.
+
+Thank you for helping us improve the security of our project!