Create SECURITY.md

Author: tabacitu

SECURITY.md

@@ -0,0 +1,24 @@
+# Security Policy
+
+## Supported Versions
+
+Updates are provided according to table below.
+
+| Version | Security Updates   |  Feature Updates   |  Bug Fixes         |
+| ------- | ------------------ | ------------------ | ------------------ |
+| 4.1.x   | :white_check_mark: | :white_check_mark: | :white_check_mark: |
+| 4.0.x   | :white_check_mark: | :x:                | :x:                |
+| 3.6.x   | :white_check_mark: | :x:                | :x:                |
+| 3.5.x   | :x:                | :x:                | :x:                |
+| 3.4.x   | :x:                | :x:                | :x:                |
+| < 4.0   | :x:                | :x:                | :x:                |
+
+## Reporting a Vulnerability
+
+If you discover any security related issues, please email [email protected] instead of using the issue tracker.
+
+## Past Vulnerabilities
+
+Since its inception in 2016, Backpack has had zero security breaches or reported security issues. However, its dependencies _have_ had security flaws discovered and fixed - even major ones like Laravel, Bootstrap and jQuery. That's why it's a good idea for any project to be reasonably up-to-date. If we consider a security issue is something that affects our users, we'll email you. 
+
+It's _heavily_ recommended that you **[subscribe to the Backpack Newsletter](http://backpackforlaravel.com/newsletter)** so you can find out about any security updates, breaking changes or major features. We send an email about 1-2 emails per year. Sometimes less.