diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..6f52880
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities by opening a private GitHub advisory rather than a public issue.
+
+We aim to respond within 72 hours and will keep you updated as we work on a fix.