summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--SECURITY.md33
1 files changed, 33 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..b7e2b73
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,33 @@
+# Security Policy
+
+## Supported Versions
+
+This section outlines which versions of the project are currently receiving
+security updates.
+
+| Version | Supported |
+| ------- | ------------------ |
+| 1.x | :white_check_mark: |
+| < 1.0 | :x: |
+
+## Reporting a Vulnerability
+
+If you discover a vulnerability, please follow the guidelines below to report
+it:
+
+1. **Submission**: Send your vulnerability report to [[email protected]].
+ Please include a detailed description of the issue, steps to reproduce it,
+ and any relevant context.
+
+2. **Response Time**: We aim to acknowledge reports within **3 business days**.
+ You will receive updates on the status of your report throughout the process.
+
+3. **Acceptance Criteria**: If the vulnerability is confirmed, we will provide
+ you with an estimated timeline for resolution and keep you informed of any
+ updates until the issue is resolved.
+
+4. **Declined Reports**: If a reported vulnerability is deemed invalid or out of
+ scope, we will notify you of our decision and provide reasoning for the
+ decline.
+
+Thank you for helping us improve the security of our project!