diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..cdc832d
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,10 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+All IPython and Jupyter related security are handled via security@ipython.org.
+You can find more information on the Jupyter website. https://jupyter.org/security
+
+## Tidelift
+
+You can also report security concerns for the `comm` package via the [Tidelift platform](https://tidelift.com/security).