diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..39351f7
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security
+
+## Reporting a Vulnerability
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Please email us at [security@open.gov.sg](security@open.gov.sg) so that we can work on a fix.