diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..62cdcc48
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+**Please don't disclose security issues publicly.** Don't open a
+public issue, pull request or discussion about a vulnerability.
+
+To report one, follow the NativePHP security policy at
+[nativephp.com/security](https://nativephp.com/security).
+
+If this repository isn't listed there, email support@nativephp.com.