diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 00000000..10f0353f
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+DO NOT PUBLISH SECURITY REPORTS PUBLICLY.
+
+If you found any issues that might have security implications, please send a report to dariusz.ruminski+php-cs-fixer[at]gmail.com .
+
+Report security bugs in third-party libraries directly to the group maintaining that library.