Add security policy

README.md

@@ -148,6 +148,10 @@ vscode ➜ /workspaces/fasttrackml (main) $ make run
 ```
 </details>
 
+### Security
+
+Please see our [security policy](https://github.com/G-Research/fasttrackml/blob/main/SECURITY.md) for details on reporting security vulnerabilities.
+
 ### License
 
 Copyright 2022-2023 G-Research

SECURITY.md

@@ -0,0 +1,5 @@
+# Security and Coordinated Vulnerability Disclosure Policy
+
+This project appreciates and encourages coordinated disclosure of security vulnerabilities. We prefer that you use the GitHub reporting mechanism to privately report vulnerabilities. Under the main repository's security tab, click "Report a vulnerability" to open the advisory form.
+
+If you are unable to report it via GitHub, have received no response after repeated attempts, or have other security related questions, please contact [email protected] and mention this project in the subject line.