From 4f020e1ba76b57debf2b386a774013f254c3bd8b Mon Sep 17 00:00:00 2001 From: Andreas Bucksteeg Date: Wed, 21 Aug 2024 22:53:22 +0300 Subject: [PATCH] chore: minor improvements Adding Version Support --- SECURITY.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 938b385..a2516e4 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -9,9 +9,10 @@ types of Ory users. * **Security SLA:** No security Service Level Agreement (SLA) is provided. * **Release Schedule:** Releases are planned every 3 to 6 months. These releases will contain all security fixes implemented up to that point. +* **Version Support:** Security patches are only provided for the current release version. -## Ory Enterprise License Customers +## Ory Enterprise License Customers * **Security SLA:** The following timelines apply for security vulnerabilities based on their severity: - Critical: Resolved within 14 days. - High: Resolved within 30 days. @@ -19,9 +20,10 @@ types of Ory users. - Low: Resolved within 180 days. - Informational: Addressed as needed. * **Release Schedule:** Updates are provided as soon as vulnerabilities are resolved, adhering to the above SLA. +* **Version Support:** Depending on the Ory Enterprise License agreement multiple versions can be supported. -## Ory Network Users +## Ory Network Users * **Security SLA:** The following timelines apply for security vulnerabilities based on their severity: - Critical: Resolved within 14 days. - High: Resolved within 30 days. @@ -29,6 +31,8 @@ types of Ory users. - Low: Resolved within 180 days. - Informational: Addressed as needed. * **Release Schedule:** Updates are automatically deployed to Ory Network as soon as vulnerabilities are resolved, adhering to the above SLA. +* **Version Support:** Ory Network always runs the most current version. + [Get in touch](https://www.ory.sh/contact/) to learn more about Ory's security SLAs and process.