diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..3c1ecad9a
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1 @@
+To report security issues privately, please use GitHub's private vulnerability reporting feature which is enabled for this repository. The maintainers will endeavour to acknowledge the report within 14 calendar days.