diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..b3e7234
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,26 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 1.0.x   | :white_check_mark: |
+
+<!--| < 1.0   | :x:                |-->
+
+## Reporting a Vulnerability
+
+### Private Disclosure Process
+
+**@codefiesta** asks that known and suspected vulnerabilities be privately and responsibly disclosed by contacting @codefiesta
+with the [details usually included with bug reports][issue-template].
+
+**Do not file a public issue.**
+
+#### When to report a vulnerability
+
+* You think you have discovered a potential security vulnerability in VimKit.
+* You are unsure how a vulnerability affects VimKit.
+
+[issue-template]: https://github.com/codefiesta/OAuthKit/blob/main/.github/ISSUE_TEMPLATE/bug_report.md
+