diff --git a/_posts/2026-10-16-flux-security-0.16.0.md b/_posts/2026-10-16-flux-security-0.16.0.md
new file mode 100644
index 00000000..ebadb2ed
--- /dev/null
+++ b/_posts/2026-10-16-flux-security-0.16.0.md
@@ -0,0 +1,24 @@
+---
+title: flux-security v0.16.0
+date: 2026-10-16 00:00:00
+author: "flux-framework"
+categories: 'release'
+version: 0.16.0
+download: https://github.com/flux-framework/flux-security/releases/download/v0.16.0/flux-security-0.16.0.tar.gz
+---
+
+Download from GitHub [here]({{ page.download }})
+
+# Release Notes
+
+flux-security version 0.16.0 - 2026-10-15
+-----------------------------------------
+
+## Features
+ * imp: tell job shell userid of enclosing instance ([#240](https://github.com/flux-framework/flux-security/issues/240))
+ * imp: exec: restrict job shell environment with an allowlist ([#238](https://github.com/flux-framework/flux-security/issues/238))
+ * imp: export `FLUX_JOB_RANKS` by default in `flux-imp run` ([#239](https://github.com/flux-framework/flux-security/issues/239))
+ * imp: sanitize log messages ([#234](https://github.com/flux-framework/flux-security/issues/234))
+
+## Build/Test/Cleanup
+ * github: bump github-actions versions ([#233](https://github.com/flux-framework/flux-security/issues/233), [#235](https://github.com/flux-framework/flux-security/issues/235), [#236](https://github.com/flux-framework/flux-security/issues/236), [#237](https://github.com/flux-framework/flux-security/issues/237))