diff --git a/SECURITY.md b/SECURITY.md index 021873470..a3a7c5923 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -12,9 +12,9 @@ You can expect a reply within 24-48 hours.
We will keep you updated on our steps to mitigate issues every 2-4 weeks. ## Timelines -Critical vulnerabilities can be expected to be patched within 1-2 weeks. -Medium risk vulnerabilities can be expected to be patched within 2-3 weeks. -Low risk vulnerabilities will be patched within 3-4 weeks. +- Critical vulnerabilities can be expected to be patched within 1-2 weeks. +- Medium risk vulnerabilities can be expected to be patched within 2-3 weeks. +- Low risk vulnerabilities will be patched within 3-4 weeks. ## Bug Bounty Depending on the severity of the exploit, we offer a $50 - $500 bug bounty.