From 24c4745ed6c6f612741d5153e3330dfef691d71a Mon Sep 17 00:00:00 2001
From: Rehan Ahmad <rehan.meeh@gmail.com>
Date: Mon, 25 May 2026 11:03:14 +0530
Subject: [PATCH] docs: add SECURITY.md with vulnerability reporting policy

---
 SECURITY.md | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..d814614
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,43 @@
+# Security Policy
+
+## Supported Versions
+
+The following versions of **Webify** are currently supported with security updates:
+
+| Version | Supported          |
+| ------- | ------------------ |
+| main    | ✅ Yes             |
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in **Webify**, please **do not open a public issue**.
+
+Instead, report it responsibly by:
+
+- 📧 Opening a **GitHub Private Security Advisory**
+- 📧 Reaching out to the maintainer directly via their [GitHub profile](https://github.com/Debmallya-03)
+- 💬 Sending a private message through GitHub's messaging or social links listed in the profile
+
+### What to include in your report:
+- A clear description of the vulnerability
+- Steps to reproduce the issue
+- Potential impact assessment
+- Any suggested fix (optional but appreciated)
+
+## Response Timeline
+
+| Action                        | Timeframe         |
+| ----------------------------- | ----------------- |
+| Acknowledgement of report     | Within 48 hours   |
+| Status update                 | Within 7 days     |
+| Patch / fix release           | Within 30 days    |
+
+## Responsible Disclosure
+
+We follow a **responsible disclosure** policy. Please give us adequate time to patch the issue before any public disclosure. We deeply appreciate security researchers who help keep **Webify** safe. 🙏
+
+## References
+
+- [Webify Repository](https://github.com/Debmallya-03/Webify)
+- [GitHub Security Advisories](https://docs.github.com/en/code-security/security-advisories)
+- [Adding a Security Policy to your repo](https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository)