diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..e1aa7f195a
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,13 @@
+# Security policy
+
+## Supported versions
+
+The [`main` branch](https://github.com/dosbox-staging/dosbox-staging/tree/main) and
+[latest release](https://github.com/dosbox-staging/dosbox-staging/releases)
+are both supported with security updates.
+
+## Reporting a vulnerability
+
+Please see the included `security.txt` for contact
+information if a security issue is found in either
+of the above.