From 62619358706cd36b579462250b409f456e2d81eb Mon Sep 17 00:00:00 2001
From: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com>
Date: Sat, 29 Mar 2025 14:49:38 +0100
Subject: [PATCH] feat(core): New Security document

- New Support Policy table
- Improved reporting guide for vulnerabilities
---
 SECURITY.md | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..fc41184547
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,26 @@
+# Security
+
+This document outlines our support policy, and how to report vulnerabilities.
+
+## Support Policy
+
+Below you can find the support status for different versions of Coolify.
+
+| Version | Supported | Support Status | Release Date | End of Life Date |
+| ------- | ------------------ | -------------- | ------- | ---------------- |
+| **5.x** | :white_check_mark: | Active Development | TBD | N/A - Current Version |
+| **4.x** | :warning: | Security & Critical Fixes Only | July 14th, 2023 | TBD |
+| **3.x** | :x: | No Longer Supported | July 6th, 2022 | September 5th, 2023 |
+
+:warning: Limited Support
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in one of the supported versions, please follow these steps:
+
+1. **DO NOT** disclose the vulnerability publicly.
+2. Send a detailed report to: `hi@coollabs.io`.
+3. Include in your report:
+   - **Explanation:** Detailed explanation of the vulnerability.
+   - **Reproduction:** Clear steps to reproduce the vulnerability.
+   - **Impact:** Assessment of the potential security impact of the vulnerability.