SECURITY.md

Rama main · réplica de lectura del repositorio original.

# Security Policy

We take the security of UptimeKit very seriously. If you discover a security vulnerability, please bring it to our attention immediately.

## Supported Versions

We only provide security fixes for the **latest version** of UptimeKit. Please ensure you are running the most recent release to receive security updates.

| Version | Supported          |
| ------- | ------------------ |
| Latest  | :white_check_mark: |
| Older   | :x:                |

## Reporting a Vulnerability

If you have discovered a security vulnerability in UptimeKit, please do **not** open a public issue on GitHub. Instead, please report it privately:

1. **Email**: Send a detailed report to [security@uptimekit.dev](mailto:security@uptimekit.dev).
2. **Details**: Please include as much information as possible, including:
    - Steps to reproduce the vulnerability.
    - The potential impact.
    - Any proof-of-concept code or screenshots.

## Response Timeline

We are committed to addressing security vulnerabilities promptly:

- **Acknowledgement**: We will acknowledge your report within 48 hours.
- **Assessment**: We will assess the severity and impact of the issue.
- **Fix**: If confirmed, we will work on a fix and release a security patch as soon as possible.
- **Disclosure**: We will coordinate the public disclosure of the vulnerability with you effectively.

Thank you for helping keep UptimeKit secure!