diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..4998472ff
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| >=0.4.0   | :white_check_mark: |
+
+## Reporting a Vulnerability
+
+Please [create an issue](https://github.com/zenstackhq/zenstack/issues) and add a "security" label. We'll actively watch, verify and fix them with high priority.
+Alternatively, you can also reach out to us at contact@zenstack.dev.
+
+Thank you for helping us make a better project!