Add SECURITY.md

SECURITY.md

@@ -0,0 +1,8 @@
+# Reporting Security Issues
+
+The lowRISC team and Ibex community (including the OpenTitan partnership) take security issues seriously.
+
+We appreciate all efforts to find security vulnerabilities in Ibex and ask that responsible disclosure is practiced should you discover a potential vulnerability.
+
+As Ibex and in particular its secure configuration was developed as part of [OpenTitan](https://www.github.com/lowrisc/opentitan) contact [[email protected]](mailto:[email protected]) to report any security issues and do not open a public issue.
+[[email protected]](mailto:[email protected]) will advise on the coordinated vulnerability disclosure (CVD) procedure.