diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..d3a64e5a
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please do not open issues for anything you think might have a security implication.
+
+Security issues and bugs should be reported privately to g_capd_ac_af@tencent.com.
+You should receive a response within 24 hours. If for some reason you do not,
+please follow up via email to ensure we received your original message.