diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 0000000..833321d
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Policy
+
+If you have identified a potential security flaw, email [security@bluedot.org](mailto:security@bluedot.org).
+
+Please don't open an issue on this repository, as this is public and may highlight the vulnerability to others.