diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..f338c471
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest version will be supported with security updates. We will not maintain old branches.
+For this reason, you should attempt to always use the latest released version.
+
+## Reporting a Vulnerability
+
+To privately report a vulnerability in oxipng, please visit [our advisories page](https://github.com/shssoichiro/oxipng/security/advisories) and use the button to report a vulnerability.
+We will review it as soon as possible.
+
+For vulnerabilities in dependencies, please open a pull request updating the dependency to a patched version.