From eb2f00a06ff7455fb00cb6426b75b5ea16fb289a Mon Sep 17 00:00:00 2001
From: Brian Ginsburg <7957636+bgins@users.noreply.github.com>
Date: Mon, 5 Aug 2024 08:32:27 -0700
Subject: [PATCH] chore: Add security policy (#273)

---
 SECURITY.md | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..84e912d0
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,41 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+At Lilypad Network, we take security very seriously. If you believe you have found a security vulnerability in our project, we appreciate your efforts to responsibly disclose it to us.
+
+### How to Report
+
+1. **Contact Information**:
+   - Please email your findings to our security team at [security@lilypad.tech](mailto:security@lilypad.tech).
+   - Include the phrase "Lilypad Network Security Vulnerability" in the subject line.
+
+2. **Information to Include**:
+   - Detailed description of the vulnerability.
+   - Steps to reproduce the vulnerability.
+   - Potential impact of the vulnerability.
+   - Any possible mitigation or fix you have identified.
+
+3. **Public Disclosure**:
+   - Do not disclose the vulnerability publicly or to any third parties before we have had a chance to investigate and address it.
+
+### What to Expect
+
+- You will receive a confirmation of your report within 48 hours.
+- Our security team will review your report and may reach out for additional information.
+- We aim to resolve and patch confirmed vulnerabilities within a reasonable time frame, depending on the complexity and impact of the issue.
+- Once the vulnerability is fixed, we will acknowledge your contribution in our release notes (if desired).
+
+### Acknowledgments
+
+We are grateful to the security community and individual researchers who take the time to responsibly report security vulnerabilities. Your efforts help us ensure that Lilypad Network remains secure for all users.
+
+## Scope
+
+This security policy applies to the Lilypad Network repository and all related code and services under our management. For vulnerabilities related to third-party dependencies, please report them to the respective maintainers.
+
+## Thank You
+
+Thank you for helping to keep Lilypad Network secure. Your contributions are invaluable to the health and safety of our community.
+
+If you have any questions or need further assistance, please don't hesitate to contact us at [security@lilypad.tech](mailto:security@lilypad.tech).