Revise vulnerability reporting guidelines

Updated the reporting process for security vulnerabilities.

Author: Alexandrbig1

SECURITY.md

@@ -7,8 +7,20 @@ We release patches and security updates for the following versions:
 | ------- | ------------------ |
 | main    | ✅ (active)        |
 
+---
+
 ## Reporting a Vulnerability
-If you discover a security vulnerability, please do not open a public issue.  
+If you discover a security vulnerability, **please do not open a public issue**.  
 Instead, report it privately by emailing us at **info@opencodechicago.org**.  
 
-We will review and respond as quickly as possible. Responsible disclosure is greatly appreciated.  
+### What to include
+- Description of the issue
+- Steps to reproduce (if possible)
+- Any known impact or severity
+
+### Our process
+- We will acknowledge receipt of your report within **5 business days**.  
+- We will investigate and aim to provide a fix or mitigation as quickly as possible.  
+- Please do not publicly disclose the issue until a fix is released.  
+
+Responsible disclosure is greatly appreciated and helps keep the community safe.