diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..f984b7f
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+… Why are you using this project?
+But feel free to find and tell me about security problems, I guess.
+
+## Reporting a Vulnerability
+
+Raise a GitHub issue.
+I might or might not ever look at it.