diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..42680be --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,20 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 2.0.x | :white_check_mark: | + +## Reporting security vulnerabilities + +The Pantos project values the independent security research community and believes that responsible disclosure of security vulnerabilities helps us ensure the security and privacy of all our users. + +Please do NOT raise a GitHub Issue to report a security vulnerability. If you believe you have found a security vulnerability, please submit a report to [contact@pantos.io](contact@pantos.io) clearly indicating [SecurityVulnerability] in the subject. We would preferably expect a proof of concept. + +We ask that you do not use other channels or contact the project maintainers directly. + +Non-vulnerability related security issues including ideas for new or improved security features are welcome on GitHub Issues.