diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..3e0548a --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +## Reporting Security Vulnerabilities + +If you discover a security vulnerability in OpenDeepSearch, please help us by reporting it responsibly. + +Please do not report security vulnerabilities through public GitHub issues. + +Instead, please send an email to the maintainers with details about the vulnerability. You can find the maintainer contact information in the main README.md file. + +## What to Include + +When reporting a vulnerability, please include: +- A description of the vulnerability +- Steps to reproduce the issue +- Potential impact of the vulnerability +- Any suggested fixes (if available) + +## Response Timeline + +We will acknowledge your report within 48 hours and provide a more detailed response within 5 days. + +Thank you for helping keep OpenDeepSearch secure!