From 8c65915afb06ba5c7feacb86a9a34a4433290b38 Mon Sep 17 00:00:00 2001
From: sysy <106249136+AAtomical@users.noreply.github.com>
Date: Tue, 14 Apr 2026 15:31:14 -0400
Subject: [PATCH] Revise the security policy and request the private
 vulnerability reporting feature.

Updated the security policy and request the private vulnerability reporting feature.
---
 SECURITY.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..dbdef9a
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest stable version of XAgent receives security updates. Make sure you are running the most recent release.
+
+## Reporting a Vulnerability
+
+Please do not open public issues for security problems. Instead, use GitHub's "Report a vulnerability" feature in the Security tab of this repository. We will review and respond as soon as possible.
+
+## Security Updates
+
+If we fix a vulnerability, we will announce it in the release notes. Keep your installation up to date to receive the latest fixes.