Add SECURITY.md

Author: SteveDesmond-ca

SECURITY.md

@@ -0,0 +1,11 @@
+# Security Policy
+
+## Supported Versions
+
+Security updates are generally only applied to the newest release, and backported on an as-needed basis where appropriate.
+
+## Reporting a Vulnerability
+
+Unless a vulnerability is deemed critical or exposes PII, please create an issue in this repository using the "Report a Bug" template.
+
+For critical vulnerabilities, or those that expose PII, please email info@ecoAPM.com so that the issue can be fixed confidentially, prior to public disclosure.