diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..e12a48a8
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+# Reporting libfido2 Security Issues
+
+To report security issues in libfido2, please contact security@yubico.com.
+A PGP public key can be found at
+https://www.yubico.com/support/security-advisories/issue-rating-system/.