security: Add security policy

Author: sec-dummy

SECURITY.md

@@ -0,0 +1,44 @@
+# Security Policy
+
+## Reporting Security Issues
+
+Please do not open public GitHub issues for security vulnerabilities.
+
+Email security concerns to: mullassery@gmail.com
+
+Include:
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Suggested fix (if any)
+
+We will acknowledge receipt within 24 hours and provide updates on remediation progress.
+
+## Supported Versions
+
+| Version | Supported |
+|---------|-----------|
+| Latest | Yes |
+| Previous | Limited |
+| Older | No |
+
+## Security Best Practices
+
+- Always use the latest version
+- Report vulnerabilities privately
+- Never share vulnerability details publicly before patch
+- Use environment variables for secrets (not hardcoded)
+- Keep dependencies updated
+- Enable GitHub security features
+
+## Vulnerability Disclosure
+
+When a security issue is confirmed:
+1. We develop and test a fix
+2. We release a new version with security patch
+3. We notify users of the vulnerability and fix
+4. We credit the reporter (if desired)
+
+## Contact
+
+Security Team: mullassery@gmail.com