diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000000..906e4b0e6be
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,17 @@
+# Security Policy
+
+## Supported Versions
+
+Please see our release roadmap on https://www.neos.io/features/release-process.html
+for an overview of which versions are still being supported fully, with security
+fixes only or no longer at all.
+
+## Security Bulletins
+
+A list of security bulletins we released can be found on https://www.neos.io/community/security-bulletins.html
+
+## Reporting a Vulnerability
+
+If you discover a security issue with Neos, Flow or a related package, please contact
+us via security@neos.io instead of using a public channel. That way we can work on a
+fix together before everyone knows how to exploit a potential issue. Thank you!