diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..7e886b078
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+libcrux is still pre-release and does not support any specific versions yet.
+
+| Version | Supported          |
+| ------- | ------------------ |
+
+## Reporting a Vulnerability
+
+Use the private [Github vulnerability reporting](https://github.com/cryspen/libcrux/security)
+or send an email to [security-reports@cryspen.com](mailto:security-reports@cryspen.com)