diff --git a/.gitignore b/.gitignore
index 3174b68b..5b8e0f19 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,4 @@
 !/test
 !/README*
 !/LICENSE*
+!/SECURITY*
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..41b76c24
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1 @@
+Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/lib/content/SECURITY.md b/lib/content/SECURITY.md
new file mode 100644
index 00000000..41b76c24
--- /dev/null
+++ b/lib/content/SECURITY.md
@@ -0,0 +1 @@
+Please send vulnerability reports through [hackerone](https://hackerone.com/github).
diff --git a/lib/content/index.js b/lib/content/index.js
index 731fdab2..fe3cf9cb 100644
--- a/lib/content/index.js
+++ b/lib/content/index.js
@@ -10,6 +10,7 @@ const content = {
   '.github/ISSUE_TEMPLATE/config.yml': './config.yml',
   '.gitignore': './gitignore',
   'LICENSE.md': './LICENSE.md',
+  'SECURITY.md': './SECURITY.md',
 }
 
 // given a root directory, copy all files in the content map