diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 00000000..d6b6b3fc
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,7 @@
+# Reporting a vulnerability
+
+If you have found any issues that might have security implications,
+please send a report privately to the email associated with the author
+of this repository.
+
+Do not report security reports publicly.