diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..24b171e --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,41 @@ +# Security Policy + +## Reporting a Security Vulnerability + +Thank you for your interest in improving the security of "Heimerdinger.LoL." We take security seriously and encourage responsible disclosure. If you discover a security vulnerability, please report it to us at **sec-report@heimerdinger.lol**. We appreciate your cooperation in keeping our project secure. + +### Responsible Disclosure Policy + +We expect security reporters to follow responsible disclosure practices. Please do not disclose any vulnerabilities publicly until they are resolved. This helps us protect our users and provide a fix promptly. + +## Response Time + +We will make our best effort to acknowledge your report within 7 days of receiving it. Our team will then investigate the issue and provide an estimated timeline for resolution. We greatly appreciate your patience and cooperation. + +## Bounty/Rewards + +At the moment, we do not offer monetary rewards or bounties for security reports. + +## Public or Private Reporting + +We prefer that you report security vulnerabilities privately to **sec-report@heimerdinger.lol** before disclosing them publicly. This gives us an opportunity to address the issue and protect our users before potential exploitation. + +## Security Contact + +You can reach us at **sec-report@heimerdinger.lol** for any security-related concerns. + +## Acknowledgments + +We appreciate the efforts of security researchers who help us make "Heimerdinger.LoL" more secure. As a token of our gratitude, we will acknowledge you in our repository's README and, if you wish, we'll also link to your website and/or social media on a dedicated security contributors web page. + +## Security Measures + +We continually work to improve the security of our project through practices such as code reviews, automated testing, and vulnerability scanning. + +## License + +"Heimerdinger.LoL" is released under the [AGPL-3.0 License](https://github.com/rico-vz/HeimerdingerLoL/blob/main/LICENSE). + +--- + +By participating in the responsible disclosure of security vulnerabilities, you help us maintain the safety and trust of our users. Thank you for your contributions to the security of "Heimerdinger.LoL."