# Security Policy

## Supported Versions

This section outlines which versions of the project are currently receiving
security updates.

| Version | Supported          |
| ------- | ------------------ |
| 1.x     | :white_check_mark: |
| < 1.0   | :x:                |

## Reporting a Vulnerability

If you discover a vulnerability, please follow the guidelines below to report
it:

1. **Submission**: Send your vulnerability report to [security@cleberg.net].
   Please include a detailed description of the issue, steps to reproduce it,
   and any relevant context.

2. **Response Time**: We aim to acknowledge reports within **3 business days**.
   You will receive updates on the status of your report throughout the process.

3. **Acceptance Criteria**: If the vulnerability is confirmed, we will provide
   you with an estimated timeline for resolution and keep you informed of any
   updates until the issue is resolved.

4. **Declined Reports**: If a reported vulnerability is deemed invalid or out of
   scope, we will notify you of our decision and provide reasoning for the
   decline.

Thank you for helping us improve the security of our project!