diff --git a/security.md b/security.md
new file mode 100644
index 000000000..bd2723ab2
--- /dev/null
+++ b/security.md
@@ -0,0 +1,17 @@
+# Security Policy
+
+## Reporting a vulnerability
+
+If you discover a security vulnerability within this project, please send an e-mail to dataportpolarsupport@dataport.de.
+
+Please include, if available, the following information in your report:
+
+- Description of the issue
+- The affected version(s)
+- The impact of the issue, e.g. how the issue may be exploited
+- Any configuration required to reproduce the issue
+- Step-by-step instructions to reproduce the issue
+
+## Supported versions
+
+All client packages are supported in their current major version. By extension, core, plugin, and library packages are supported as they are used in the respective clients.