---

name: security-policy description: Security policy and vulnerability reporting

Security Policy

Content

1. Supported versions
2. Reporting vulnerabilities
3. Response process
4. Disclosure policy

Template

Copy# Security Policy

## Supported Versions
| Version | Supported |
|---------|-----------|
| 1.x | Yes |

## Reporting
Email: security@example.com

## Response
- Acknowledge: 24h
- Assessment: 72h
- Fix: Based on severity

## Disclosure
90 days after fix