From f3df3bbb936da3c5a5f9f617e4d69df6b3289937 Mon Sep 17 00:00:00 2001
From: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com>
Date: Sat, 29 Mar 2025 14:49:38 +0100
Subject: [PATCH] docs: add improved SECURITY.md file

- new Support Policy table
- improved reporting guide for vulnerabilities
---
 SECURITY.md | 30 ++++++++++++++++--------------
 1 file changed, 16 insertions(+), 14 deletions(-)

diff --git a/SECURITY.md b/SECURITY.md
index e491737ef..7dca68dd7 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,25 +1,27 @@
-# Security Policy
+# Security
 
-## Supported Versions
+This page outlines our support policy and how to report vulnerabilities.
 
-Currently supported, maintained and updated versions:
+## Support Policy
 
-| Version | Supported          | Support Status |
-| ------- | ------------------ | -------------- |
-| 4.x     | :white_check_mark: | Active Development & Security Updates |
-| < 4.0   | :x:                | End of Life (no security updates) |
+Below you can find the support status for different versions of Coolify.
 
-## Security Updates
+| Version | Supported          | Support Status                     | Initial Release | End of Life Date      |
+| ------- | ------------------ | ---------------------------------- | --------------- | --------------------- |
+| **5.x** | :white_check_mark: | Active Development                 | TBD             | N/A - Current Version |
+| **4.x** | :warning:          | Security & Critical Bug Fixes Only | July 14th, 2023 | TBD                   |
+| **3.x** | :x:                | No Longer Supported                | July 6th, 2022  | September 5th, 2023   |
 
-We take security seriously. Security updates are released as soon as possible after a vulnerability is discovered and verified.
+:warning: : Limited Support
 
 ## Reporting a Vulnerability
 
-If you discover a security vulnerability, please follow these steps:
+If you find a security vulnerability in a currently supported version, please follow these steps:
 
 1. **DO NOT** disclose the vulnerability publicly.
-2. Send a detailed report to: `security@coollabs.io`.
+2. Send a detailed report to: `security@coollabs.io` or report it via [GitHub Security Advisories](https://github.com/coollabsio/coolify/security/advisories/new).
 3. Include in your report:
-   - A description of the vulnerability
-   - Steps to reproduce the issue
-   - Potential impact
+    - **Explanation:** Detailed explanation of the vulnerability.
+    - **Affected Versions:** Which Coolify versions are affected.
+    - **Reproduction:** Clear steps to reproduce the vulnerability.
+    - **Impact:** Assessment of the potential impact of the vulnerability.