diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..b2dc36bf
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Reporting a Vulnerability
+
+To report a vulnerability for Rufus, please e-mail support@akeo.ie.
+
+If you find a vulnerability, we will ask you to respect [responsible disclosure](https://en.wikipedia.org/wiki/Responsible_disclosure) practices.
+
+In return, we will endeavour to respond to vulnerability reports within 48 hours.