diff --git a/README.md b/README.md
index 9c4c8559..83229446 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,9 @@
   <a href="https://results.pre-commit.ci/latest/github/topsport-com-au/starlite-saqlalchemy/main">
     <img alt="pre-commit.ci status" src="https://results.pre-commit.ci/badge/github/topsport-com-au/starlite-saqlalchemy/main.svg"/>
   </a>
+  <a href="https://bestpractices.coreinfrastructure.org/projects/6646">
+    <img alt="OpenSSF Best Practices" src="https://bestpractices.coreinfrastructure.org/projects/6646/badge">
+  </a>
 </p>
 
 Configuration for a [Starlite](https://github.com/starlite-api/starlite) application that features:
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..767b9671
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+To report a vulnerability create a [GitHub Issue](https://github.com/topsport-com-au/starlite-saqlalchemy/issues)