Add a GitHub security policy.

diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644 (file)
index 0000000..0fe39f8
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,22 @@
+# Security Policy
+
+## Supported Versions
+
+Currently the v2 (old stable) and v3 (stable) branches are actively receiving security fixes. Support for v2 will end on 2019-06-01.
+
+The v4 branch is still early in development and only receives security fixes when they are synced from the v3 branch.
+
+Version | Supported
+------- | ---------
+4.x.y   | :warning:
+3.x.y   | :white_check_mark: 
+2.0.x   | :white_check_mark:
+1.2.y   | :x:
+1.1.y   | :x:
+1.0.y   | :x:
+
+## Reporting a Vulnerability
+
+Please do not report security vulnerabilities on GitHub. Instead, get the attention of a developer in our [development IRC channel](https://kiwiirc.com/nextclient/irc.inspircd.org:+6697/#inspircd.dev) at irc.inspircd.org #inspircd.dev and PM them the details.
+
+We will triage your issue as soon as possible and try to release a fixed version within a week of receiving your report.