Create SECURITY.md

jhutchings1 · web-flow · commit 1fc0fbb63e6d · 2019-10-16T10:29:36.000-04:00
Creating an org-wide security policy based upon the Bug Bounty program definition.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,7 @@
+# GitHub Security Policy
+
+Software security researchers are increasingly engaging with Internet companies to hunt down vulnerabilities. Our bounty program gives a tip of the hat to these researchers and provides rewards of $30,000 or more for critical vulnerabilities.
+
+If you’ve found a vulnerability, [submit it here](https://hackerone.com/github).
+
+You can find useful information in our [rules](https://bounty.github.com/#rules), [scope](https://bounty.github.com/#scope), [targets](https://bounty.github.com/#scope) and [FAQ](https://bounty.github.com/#faqs).
