diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..946410db
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+We take a very active stance in eliminating security problems in Teaclave. We
+strongly encourage folks to report such problems to our private mailing list
+first (private@teaclave.apache.org), before disclosing them in a public forum.