diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..288d2f85
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+To report a security issue, please email `sagesecurity@sasebase.org` with a description of the
+issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the
+issue. This project follows a 90 day disclosure timeline.