docs: add SECURITY.md

SECURITY.md

@@ -0,0 +1,56 @@
+# Security Policy
+
+## Supported Versions
+
+The following table outlines the versions of the project that are currently supported with security updates:
+
+| Version                                                 | Supported | Umbraco Version |
+| ------------------------------------------------------- | --------- | --------------- |
+| [15.x](https://github.com/jcdcdev/Umbraco.Community.DataProtection/tree/v15)   | ✅         | 15              |
+| [14.x](https://github.com/jcdcdev/Umbraco.Community.DataProtection/tree/v14)   | ✅         | 14              |
+| [13.x](https://github.com/jcdcdev/Umbraco.Community.DataProtection/tree/v13)   | ✅         | 13              |
+| [10.x](https://github.com/jcdcdev/Umbraco.Community.DataProtection/tree/v10)   | ✅         | 10              |
+| [12.x](https://github.com/jcdcdev/Umbraco.Community.DataProtection/tree/v12)   | ❌         | 12              |
+| [0.1.x](https://github.com/jcdcdev/Umbraco.Community.DataProtection/tree/main) | ❌         | 11              |
+
+
+## Future Support
+
+Project maintainers plan to support all STS (Short-Term Support) and LTS (Long-Term Support) versions of Umbraco. However, exact release dates cannot be guaranteed.
+
+> [!NOTE]
+> Visit [jcdc.dev/blog/umbraco-version-information](https://jcdc.dev/blog/umbraco-version-information) for more information on Umbraco versions.
+
+## Reporting a Vulnerability
+
+If you discover a vulnerability in this project, please follow one of these steps to report it:
+
+- Create an [issue](https://github.com/jcdcdev/Umbraco.Community.DataProtection/security/advisories/new) 
+- Contact the project author privately at [jcdc.dev/contact](https://jcdc.dev/contact)
+
+### Details
+
+Include as much information as possible about the vulnerability, including:
+
+- Steps to reproduce
+- Potential impact
+- Any suggested fixes
+
+
+### Acknowledgment
+
+You will receive an acknowledgment of your report as soon as possible. 
+
+> [!NOTE]
+> Response times may vary depending on other commitments.
+
+### Resolution
+
+Once the vulnerability is confirmed, project maintainers will work to resolve it as quickly as possible. 
+
+You will be notified once the issue has been resolved or rejected. 
+
+> [!TIP]
+> If the vulnerability is accepted, you will receive credit in the release notes.
+
+Thank you for helping to keep this project secure!