diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..3c372911 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,19 @@ +# Security Policy + +## Supported Versions + +Shuffle is currently still in beta, but we aim to support older version with critical severity issues, but do advise you to stay up to date with Major versions. + +| Version | Supported | +| ------- | ------------------ | +| >=0.9.0 | :white_check_mark: | +| < 0.9.0 | :x: | + +## Reporting a Vulnerability + +Reporting a vulnerability can either be done to (frikky@shuffler.io)[mailto:frikky@shuffler.io] or [through the contact page on our website](https://shuffler.io/contact) + +Security.txt: https://shuffler.io/.well_known/security.txt + +When a >medium severity vulnerability is discovered, expect it to be fixed ASAP - please nag us until it is. Security is a top priority, and we expect you to keep us accountable. +In the case it makes sense, we'll further create a security advisory, and publish a new CVE for your new glorious finding.