diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..6b0ee5e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,11 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in this project, please report it
+responsibly through **GitHub Private Vulnerability Reporting (PVR)**.
+
+**To report**: Go to the [Security Advisories page](../../security/advisories/new)
+and submit a new advisory.
+
+Please **do not** open public issues for security vulnerabilities.