docs: add security.md

SECURITY.md

@@ -0,0 +1,13 @@
+# Security
+
+## Disclosure policy
+
+Please email reports about any security related issues you find to devfrazs@outlook.com.
+Please use a descriptive subject line in your report email, in addition to a reference or link to this repository.
+After the initial reply to your report, we will endeavor to keep you informed of the progress being made towards a fix.
+
+In addition, please include the following information along with your report:
+
+-   Your name and affiliation (if any)
+-   A description of the technical details of the vulnerabilities
+-   An explanation who can exploit this vulnerability, and what they gain when doing so