Update SECURITY.md

SECURITY.md

@@ -0,0 +1,19 @@
+## Security Policy
+
+We take security seriously. If you discover any security related issues, please email thomasvincent@[your-domain] instead of using the issue tracker.
+
+### Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| X.X.X   | :white_check_mark: |
+| X.X.X   | :x:                |
+
+### Reporting a Vulnerability
+
+Please report (suspected) security vulnerabilities to thomasvincent@[your-domain]. You will receive a response from us within [your-response-timeframe]. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within [your-patch-timeframe].
+
+### Additional Security Considerations
+[Add language or framework-specific OWASP Top 10 guidance here]
+
+[If applicable, add information about your bug bounty program here]