diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..fedd583a18 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,15 @@ +# Security Policy + +## Supported Versions + +Only the latest version is supported with security updates. + +## Reporting a Vulnerability + +Please [contact support](mailto:tamlokveer@gmail.com) **with a proof of concept** that shows the security vulnerability. Please do not contact us without this proof of concept, as we cannot fix anything without this. + +For general opinions on what makes an app more or less secure, please use the forum. + +## Bounty + +We **do not** offer a bounty for discovering vulnerabilities, please do not ask. We can however credit you and link to your website/profile in the changelog and release announcement.