diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..7db0c453 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,19 @@ +# Security Policy + +## Reporting a Vulnerability + +If there are any vulnerabilities in **m1k1o/neko**, don't hesitate to _report them_. + +1. Send an email to `security@m1k1o.net`. + +2. Describe the vulnerability. + + If you have a fix, that is most welcome -- please attach or summarize it in your message! + +3. We will evaluate the vulnerability and, if necessary, release a fix or mitigating steps to address it. We will contact you to let you know the outcome, and will credit you in the report. + + Please **do not disclose the vulnerability publicly** until a fix is released! + +4. Once we have either a) published a fix, or b) declined to address the vulnerability for whatever reason, you are free to publicly disclose it. + +We appreciate your help in keeping Neko secure. diff --git a/webpage/src/pages/contact.md b/webpage/src/pages/contact.md index fec9db6a..42ea917f 100644 --- a/webpage/src/pages/contact.md +++ b/webpage/src/pages/contact.md @@ -9,3 +9,11 @@ We are here to assist you with any issues you may face while setting up or using - For installation or usage questions, [join our Discord](https://discord.gg/3U6hWpC) and post in the [#community-help](https://discord.com/channels/665851821906067466/696222582114091088) channel. - To report bugs or request features, [open a new issue on GitHub](https://github.com/m1k1o/neko/issues). - If you find an issue with this documentation, click the `Edit this page` button at the bottom of the page and then the `edit` button on the GitHub page that opens to make edits directly from your browser. (See a [step-by-step guide here](https://docs.github.com/en/repositories/working-with-files/managing-files/editing-files)). + +**Enterprise Support** + +For enterprises or organizations requiring **dedicated, paid support**, custom solutions, or priority assistance, please contact us at neko@m1k1o.net. + +**Security** + +If you discover a security vulnerability in Neko, please report it to us directly at security@m1k1o.net. We take security seriously and will work with you to address the issue promptly. Please do not disclose the vulnerability publicly until we have had a chance to address it. We appreciate your help in keeping Neko secure. diff --git a/webpage/static/.well-known/security.txt b/webpage/static/.well-known/security.txt new file mode 100644 index 00000000..15c7ba55 --- /dev/null +++ b/webpage/static/.well-known/security.txt @@ -0,0 +1,3 @@ +Contact: mailto:security@m1k1o.net +Policy: https://github.com/m1k1o/neko/security +Expires: 2030-04-01T00:00:00z