Merge pull request #287 from Dstack-TEE/audit

Add security audit report and documentation

Author: h4x3rotab

README.md

@@ -52,6 +52,7 @@ dstack is community driven. Open sourced and built by [Kevin Wang](https://githu
 - [Advanced Features](#-advanced-features)
   - [Zero Trust HTTPS](#zero-trust-https)
   - [Certificate Transparency Log Monitor](#certificate-transparency-log-monitor)
+- [Security](#-security)
 - [Troubleshooting](#-troubleshooting)
 - [Media Kit](#-media-kit)
 - [License](#-license)
@@ -407,6 +408,27 @@ $ ./ct_monitor -t https://localhost:9010/prpc -d app.kvin.wang
 
 ---
 
+## 🔒 Security
+
+dstack undergoes regular security audits to ensure the highest standards of security for TEE-based deployments.
+
+### Security Audit Report
+
+A comprehensive security audit was conducted to evaluate the security architecture and implementation of dstack. The audit report is available at:
+
+📄 **[Security Audit Report](./docs/security/dstack-audit.pdf)**
+
+The audit covers key security aspects including:
+- TEE integration and attestation mechanisms
+- Cryptographic implementations and key management
+- Network security and TLS configurations
+- Container isolation and runtime security
+- Smart contract security (for blockchain integrations)
+
+For additional security guidance and best practices, see the [Security Guide](./docs/security-guide/security-guide.md).
+
+---
+
 ## 🔧 Troubleshooting
 
 ### Error: qemu-system-x86_64: vhost-vsock: unable to set guest cid: Address already in use