diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..f722272
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report any security vulnerabilities by emailing us at [support@datacommons.org](mailto:support@datacommons.org). Please do not open a public issue or pull request.
+
+### What to Include in the Report
+
+To help us address the issue as quickly as possible, please include the following details in your report:
+- A description of the vulnerability and its potential impact.
+- Step-by-step instructions (or a proof-of-concept script) to reproduce the issue.
+- Any details about the environment or configuration where the issue was found.
+
+We appreciate your help in keeping Data Commons secure!