Create SECURITY.md

Author: naveed-ahmad

SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in the QUL project, please report it to us directly by email:
+
+📧 **naveed.ahmad@tarteel.ai**
+
+When reporting, please include as much detail as possible to help us quickly understand and address the issue.
+
+**Important:**  
+Please do not publicly disclose any vulnerabilities before we have had a chance to review and respond.
+
+---
+
+## Our Process
+
+- We aim to acknowledge your report within **5 business days**.
+- We will work to investigate and fix valid security issues as quickly as possible.
+- Once the issue is resolved, we may publish a fix and credit the reporter if they wish.
+
+Thank you for helping us keep QUL safe!