diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..81537d6
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,11 @@
+# Reporting a security issue
+
+Please contact me at
+[radon.neon@gmail.com](mailto:radon.neon@gmail.com) if you find any
+way to:
+
+* Take down Riju without using a large number of concurrent sessions.
+* View or interfere with another user's session.
+* Tamper with the Riju server.
+
+I will do my best to correct the vulnerability as soon as possible.