diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..bbdaded17e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+General security issues and concerns are we welcome in the public Github issue tracker: https://github.com/transloadit/uppy/issues.
+
+In case of a high risk of the shared vulnerability being exploited, please report it to support@transloadit.com instead, and visit https://transloadit.com/security/ to read about Transloadit’s security policy, and how we generally handle these cases.