diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..4bb2ab07
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,19 @@
+# Security Policy
+
+If you discover a security issue, please bring it to our attention right away!
+
+## Reporting a Vulnerability
+
+Please `DO NOT` file a ~~public~~ issue to report a security vulberability.
+
+```
+Send your report PRIVATELY to salmen at hey dot com
+```
+
+This will help ensure that any vulnerabilities that are found can be
+[disclosed responsibly](https://en.wikipedia.org/wiki/Responsible_disclosure) to any affected parties.
+
+## Supported Versions
+
+We will provide security updates for any version that was released within the last 12 months. We encourage all users to
+keep their installations up-to-date.