From 0a4bc7e1815355c7cf34c0463bc17691bf057842 Mon Sep 17 00:00:00 2001 From: Pranay Prateek Date: Mon, 30 May 2022 17:22:20 +0530 Subject: [PATCH] Update SECURITY.md --- SECURITY.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index f3d98cc3c809..088a7f1c19ef 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -7,9 +7,11 @@ We always recommend using the latest version of SigNoz to ensure you get all sec ## Reporting a Vulnerability -If you believe you have found a vulnerability, feel free to reach out to +If you believe you have found a security vulnerability within Infracost, please let us know right away. We'll try and fix the problem as soon as possible. -We currently do not operate a bug bounty program, but we will generously reward you with merch for any actionable security vulnerabilities found. +Do not report vulnerabilities using public GitHub issues. Instead, email with a detailed account of the issue. Please submit one issue per email, this helps us triage vulnerabilities. + +Once we've received your email we'll keep you updated as we fix the vulnerability. ## Thanks