diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 000000000000..69dc53dc4393
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,8 @@
+# Security policy
+
+Report security vulnerabilities affecting T3 Code or T3 Tools-operated infrastructure to
+[security@ping.gg](mailto:security@ping.gg). Please do not disclose them publicly until we have had
+a reasonable opportunity to investigate and remediate them.
+
+See the [full security policy](https://t3.codes/security-policy) for reporting details, scope,
+and safe harbor terms for good-faith research.