Skip to main content

Security Policy Generator

v1.0.4

Generate SECURITY.md documents for vulnerability reporting workflows.

Generates SECURITY.md document templates for open source repositories — defines supported versions, vulnerability reporting process, disclosure timeline, and contact information.

How to use
  • →Enter your repo name, supported version range, and security contact email.
  • →Select a disclosure timeline policy (responsible disclosure, coordinated, etc.).
  • →Copy to SECURITY.md in your repository root; GitHub surfaces this in the Security tab.
SECURITY.md
# Security Policy

## Supported Versions
| Version | Supported |
| ------- | --------- |
| latest  | :white_check_mark: |
| older   | :x: |

## Reporting a Vulnerability
Please report vulnerabilities to security@example.com.

Do not open public issues for security vulnerabilities.

## Response Process
- Acknowledgement within 72 hours
- Triage and severity classification
- Coordinated fix and disclosure timeline