diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..438f248
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,16 @@
+# Security Policy
+
+> **Placeholder**: Vulnerability reporting process and response SLAs will be defined as part of the EarthSpark Open-Source Strategy.
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in any EarthSpark project, please report it responsibly.
+
+- **Do not** open a public issue for security vulnerabilities
+- Email: [placeholder — security contact email to be determined]
+
+We will acknowledge receipt and provide an estimated timeline for a fix.
+
+## Supported Versions
+
+Details on which versions receive security updates will be added here.