diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..576279f9fd
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+Currently the recent versions (a year old at max) of the current major
+release are supported to get security fixes. For older versions we urge
+you to update to the most recent version of OpenSlides.
+
+## Reporting a Vulnerability
+
+Please let us know about the vulnerability by an email to
+[security@openslides.com](mailto:security@openslides.com). Do not create
+public issues for such problems. We will get in touch with you after reporting
+the issue.