🔒️ Add Patchstack security policy

README.md

@@ -59,3 +59,7 @@ We are [Epiph.yt](https://epiph.yt/), your friendly neighborhood WordPress plugi
 ## License
 
 Block Control is free software, and is released under the terms of the GNU General Public License version 2 or (at your option) any later version. See [LICENSE.md](LICENSE.md) for complete license.
+
+## How can I report security bugs?
+
+You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/vdp/block-control)

SECURITY.md

@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+We usually only support the latest major version.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.1.x   | :white_check_mark: |
+| < 1.1   | :x:                |
+
+## How can I report security bugs?
+
+You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/vdp/block-control)

readme.txt

@@ -66,6 +66,10 @@ We are [Epiph.yt](https://epiph.yt/), your friendly neighborhood WordPress plugi
 
 You can contribute to the code on [GitHub](https://github.com/epiphyt/block-control).
 
+= How can I report security bugs? =
+
+You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/vdp/block-control)
+
 == Changelog ==
 
 = 1.1.12 =