From 2ef40bf0d1bc12e1aefffa3fab34d9d5bce5057b Mon Sep 17 00:00:00 2001
From: Rachael Shaw <r@rachael.wtf>
Date: Fri, 27 Feb 2026 09:28:54 -0600
Subject: [PATCH] Add note about compatibility to security policy (#40555)

Add language clarifying that Fleet may occasionally break semver
conventions when addressing security issues.
---
 SECURITY.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/SECURITY.md b/SECURITY.md
index b4186a6683..baf3b451ea 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -16,4 +16,8 @@ The fingerprint of the key is `23A1 9D1F 16D7 1846 57D1  6D67 320D B57D
 
 GitHub issues concerning vulnerabilities will be tagged with the **security** label to differentiate them from other issues and maintain SOC2 compliance.  
 
-See [security/README.md](./security/README.md) for more information on our process to keep Fleet products secure.
\ No newline at end of file
+See [security/README.md](./security/README.md) for more information on our process to keep Fleet products secure.
+
+### Compatibility
+
+Fleet reserves the right to make breaking changes for security. Security fixes may introduce backward-incompatible changes and may be released in minor or patch versions.