diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..e90bd33b
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,10 @@
+# Security Policy
+
+## Supported Versions
+
+wRPC is currently pre-1.0.0 and security vulnerabilities, although unlikely, are possible.
+Post-1.0.0 release the last 2 major versions will be supported with security patches.
+
+## Reporting a Vulnerability
+
+For reporting a security vulnerability please either use GitHub Security Advisory reporting or email [rvolosatovs@riseup.net](mailto:rvolosatovs@riseup.net)