doc: SECURITY.md

SECURITY.md

@@ -0,0 +1,23 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+At Hexancore, we take security concerns seriously. 
+If you discover a security vulnerability, please let us know as soon as possible. 
+We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your contributions.
+
+## Responsible Disclosure Guidelines
+
+- **Let us know immediately** upon discovery of a potential security issue, and we'll make every effort to quickly resolve the issue.
+- **Provide us with a reasonable amount of time** to address the issue before disclosing it publicly.
+- **Do not exploit the vulnerability** for any purpose other than to demonstrate its existence.
+
+## Reporting Security Issues
+
+Please report security issues directly to [email protected]. 
+You can expect to receive acknowledgement of your report within 24h. 
+If the issue is confirmed, we will release a patch as soon as possible in the next scheduled update cycle.
+
+## Security Updates
+
+Security updates and patches will be provided in a timely manner and will be documented in our release notes.