diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..912b9c8a
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you find a critical security vulnerability in this repo, you can report it directly by
+email to the main maintainer on `contact@ophir.dev`.
+This will allow publishing a new safe version before the vulnerability starts being exploited.