Add SECURITY.md as requested in #1018 (#1025)

* add SECURITY.md as requested in #1018 * SECURITY.md: do not advise to report security issues publicly
avast · Sep 20, 2021 · 8e405d3 · 8e405d3
1 parent ebfd10d
commit 8e405d3
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report (suspected) security vulnerabilities to our email [info@retdec.com](mailto:info@retdec.com). Please provide as much information as possible. We will try to confirm the issue and respond in a matter of days. The fix itself depends on the complexity of the issue, its acuteness, and our currently available resources.