diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..d6620ae
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,6 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+The best way to contact us is to send a message to [@tommy:arcticfoxes.net](https://matrix.to/#/@tommy:arcticfoxes.net) on [Matrix](https://matrix.org/).
+Alternatively, please send an email to [tommy@arcticfoxes.net](mailto:tommy@arcticfoxes.net). We would appreciate it if you can encrypt the message. The PGP key can be founded [here](https://tommytran.io/tommy.asc).