diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..81a913e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,12 @@
+# Security Policy
+
+## Supported Versions
+
+Conduit is pre-1.0. Security fixes go into the latest release only.
+
+## Reporting a Vulnerability
+
+If you have found a security issue in conduit, please contact the security team at
+security@datadoghq.com, rather than filing a public issue.
+
+Include the conduit version (`conduit --version`), the Bazel version, and steps to reproduce.