diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 0000000..4d7b07c
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,5 @@
+# Python cx_Oracle Security
+
+## Reporting a Vulnerability
+
+See https://www.oracle.com/corporate/security-practices/assurance/vulnerability/reporting.html for how to report security issues.