diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..0dc29b09
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+This repo exists to public the source to https://lobste.rs
+
+While we occasionally answer questions, we don't have a formal support
+policy for sites using the codebase.
+
+
+## Reporting a Vulnerability
+
+Please email peter@push.cx. I'll try to respond promptly.
+If you've found an issue, I'll help ensure you get credit for it.