diff --git a/.github/SECURITY.yml b/.github/SECURITY.yml
new file mode 100644
index 00000000..5e565ec1
--- /dev/null
+++ b/.github/SECURITY.yml
@@ -0,0 +1,2 @@
+To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure.