Update for GPT4o

README.md

@@ -10,7 +10,7 @@ Python:
 
 1. **Starter**: `llama-index` (https://pypi.org/project/llama-index/). A starter Python package that includes core LlamaIndex as well as a selection of integrations.
 
-2. **Customized**: `llama-index-core` (https://pypi.org/project/llama-index-core/). Install core LlamaIndex and add your chosen LlamaIndex integration packages ([temporary registry](https://pretty-sodium-5e0.notion.site/ce81b247649a44e4b6b35dfb24af28a6?v=53b3c2ced7bb4c9996b81b83c9f01139))
+2. **Customized**: `llama-index-core` (https://pypi.org/project/llama-index-core/). Install core LlamaIndex and add your chosen LlamaIndex integration packages on [LlamaHub](https://llamahub.ai/)
    that are required for your application. There are over 300 LlamaIndex integration
    packages that work seamlessly with core, allowing you to build with your preferred
    LLM, embedding, and vector store providers.

SECURITY.md

@@ -1,11 +1,39 @@
 # Security Policy
 
-## Supported Versions
+Before reporting a vulnerability, please review In-Scope Targets and Out-of-Scope Targets below.
 
-Currently, we support security patches by committing changes and bumping the version published to PyPi.
+## In-Scope Targets
 
-## Reporting a Vulnerability
+The following packages and repositories are eligible for bug bounties:
 
-Found a vulnerability? Please email us:
+- llama-index-core
+- llama-index-integrations (see exceptions)
+- llama-index-networks
 
-- security@llamaindex.ai
+## Out of Scope Targets
+
+All out of scope targets defined by huntr as well as:
+
+- **llama-index-experimental**: This repository is for experimental code and is not
+  eligible for bug bounties, bug reports to it will be marked as interesting or waste of
+  time and published with no bounty attached.
+- **llama-index-integrations/tools**: Community contributed tools are not eligible for bug
+  bounties. Generally tools interact with the real world. Developers are expected to
+  understand the security implications of their code and are responsible for the security
+  of their tools.
+- Code documented with security notices. This will be decided done on a case by
+  case basis, but likely will not be eligible for a bounty as the code is already
+  documented with guidelines for developers that should be followed for making their
+  application secure.
+
+## Reporting LlamaCloud Vulnerabilities
+
+Please report security vulnerabilities associated with LlamaCloud by email to `security@llamaindex.ai`.
+
+- LlamaCloud site: https://cloud.llamaindex.ai
+- LlamaCloud API: https://api.cloud.llamaindex.ai/docs
+- LlamaParse client: https://github.com/run-llama/llama_parse
+
+### Other Security Concerns
+
+For any other security concerns, please contact us at `security@llamaindex.ai`.