diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..2707af2ad
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,3 @@
+# Reporting a vulnerability
+
+If you've found a security issue that you'd like to disclose confidentially please contact [Red Hat's Product Security team](https://access.redhat.com/security/team/contact).