diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..a2ae045
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,9 @@
+## Report a security issue
+
+The lettre project team welcomes security reports and is committed to providing prompt attention to security issues.
+Security issues should be reported privately via [security@lettre.at](mailto:security@lettre.at). Security issues
+should not be reported via the public Github Issue tracker.
+
+## Security advisories
+
+Security issues will be announced via the [RustSec advisory database](https://github.com/RustSec/advisory-db).