diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..a94815e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability within _fastlane_ please report a [vulnerability](https://github.com/fastlane/fastlane/security/advisories/new) for our team to review instead of opening a public issue or pull request.
+
+Please be sure to include the affected version, tool(s) or action(s) involved, as well as steps for reproducing.