diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..eaf5586ddb
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,18 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+The preferred approach to report a security vulnerability is to contact the
+respective BIP owners and affected projects that implement a BIP. Should
+attempts to contact the affected parties fail, the report can be sent by email
+to one or more of the BIP Editors listed below. The contacted BIP Editors will
+make their best effort to triage the report and get in touch with the respective
+parties.
+
+* Bryan Bishop ([kanzure@gmail.com](mailto:kanzure@gmail.com))
+* Jon Atack ([jon@atack.com](mailto:jon@atack.com))
+* Mark "Murch" Erhardt ([murch@murch.one](mailto:murch@murch.one))
+* Olaoluwa Osuntokun ([laolu32@gmail.com](mailto:laolu32@gmail.com))
+* Ruben Somsen ([rsomsen@gmail.com](mailto:rsomsen@gmail.com))
+
+Note: These email addresses are exclusively for vulnerability reporting.