diff --git a/README.md b/README.md
index a7c5b2a..33ef66f 100644
--- a/README.md
+++ b/README.md
@@ -26,3 +26,11 @@ $html = $renderer->render($pugInput);
 
 //$html is now a string of HTML or any other markup according to the formatter you choose (XML, xHTML, etc.)
 ```
+
+Security contact information
+-----
+
+To report a security vulnerability, please use the
+[Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure.
+