add SECURITY.md file.

SECURITY.md

@@ -0,0 +1,19 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If there are any vulnerabilities in **m1k1o/neko**, don't hesitate to _report them_.
+
+1. Send an email to `security@m1k1o.net`.
+
+2. Describe the vulnerability.
+
+   If you have a fix, that is most welcome -- please attach or summarize it in your message!
+
+3. We will evaluate the vulnerability and, if necessary, release a fix or mitigating steps to address it. We will contact you to let you know the outcome, and will credit you in the report.
+
+   Please **do not disclose the vulnerability publicly** until a fix is released!
+
+4. Once we have either a) published a fix, or b) declined to address the vulnerability for whatever reason, you are free to publicly disclose it.
+
+We appreciate your help in keeping Neko secure.

webpage/src/pages/contact.md

@@ -9,3 +9,11 @@ We are here to assist you with any issues you may face while setting up or using
 - For installation or usage questions, [join our Discord](https://discord.gg/3U6hWpC) and post in the [#community-help](https://discord.com/channels/665851821906067466/696222582114091088) channel.
 - To report bugs or request features, [open a new issue on GitHub](https://github.com/m1k1o/neko/issues).
 - If you find an issue with this documentation, click the `Edit this page` button at the bottom of the page and then the `edit` button on the GitHub page that opens to make edits directly from your browser. (See a [step-by-step guide here](https://docs.github.com/en/repositories/working-with-files/managing-files/editing-files)).
+
+**Enterprise Support**
+
+For enterprises or organizations requiring **dedicated, paid support**, custom solutions, or priority assistance, please contact us at <a href="mailto:neko@m1k1o.net">neko@m1k1o.net</a>.
+
+**Security**
+
+If you discover a security vulnerability in Neko, please report it to us directly at <a href="mailto:security@m1k1o.net">security@m1k1o.net</a>. We take security seriously and will work with you to address the issue promptly. Please do not disclose the vulnerability publicly until we have had a chance to address it. We appreciate your help in keeping Neko secure.

webpage/static/.well-known/security.txt

@@ -0,0 +1,3 @@
+Contact: mailto:security@m1k1o.net
+Policy: https://github.com/m1k1o/neko/security
+Expires: 2030-04-01T00:00:00z