docs: add security.md

2026-09-01 16:48:19 +00:00 · 2026-06-08 15:52:22 -07:00
parent 9c822aff30
commit 0c2ccc32e3
1 changed files with 21 additions and 0 deletions
@@ -0,0 +1,21 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please do not report security vulnerabilities through public GitHub issues.
+
+Instead, contact the maintainers directly via the MeshCore Canada Discord
+server: [MeshCore Canada Discord](https://discord.gg/Gz3KvJx2hf) — reach out to
+**dedskelly** directly. Include as much detail as possible: the nature of the
+issue, steps to reproduce, and any potential impact.
+
+We will acknowledge receipt within 48 hours and aim to provide a fix or
+mitigation within 14 days depending on severity.
+
+Once a fix is released we will publish a security advisory on the repository.
+
+## Scope
+
+Beacon is intended for deployment on trusted internal networks behind a reverse
+proxy. There is currently no authentication layer. Please bear this in mind when
+assessing the severity of any findings.