diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..2f47176989
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,17 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported         |
+| ------- | ------------------|
+| 21.x   | yes                |
+| 22.0   | yes                |
+
+## Reporting a Vulnerability
+
+Please report (suspected) security vulnerabilities to security@jkiss.org.    
+You will receive a response from us within 48 hours.    
+If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within a few days.
\ No newline at end of file