diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..f51ae035
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you find a security vulnerability in Tabletop Club, please do not create an
+issue on GitHub, as this will be visible to the public.
+
+Instead, please send an email directly to me at drwhut@gmail.com, and I will
+respond as soon as I can.