diff --git a/warden.toml b/warden.toml
new file mode 100644
index 000000000..173bd76d6
--- /dev/null
+++ b/warden.toml
@@ -0,0 +1,51 @@
+# Warden Configuration
+# https://github.com/getsentry/warden
+#
+# Warden reviews code using AI-powered skills triggered by GitHub events.
+# Skills live in .agents/skills/ or .claude/skills/
+#
+# Add skills with: warden add <skill-name>
+
+version = 1
+
+# Default settings inherited by all skills
+[defaults]
+# Severity levels: critical, high, medium, low, info
+# failOn: minimum severity that fails the check
+failOn = "high"
+# reportOn: minimum severity that creates PR annotations
+reportOn = "medium"
+
+# Skills define what to analyze and when to run
+# Add skills with: warden add <skill-name>
+#
+# Example skill with path filters and triggers:
+#
+# [[skills]]
+# name = "security-review"
+# paths = ["src/**/*.ts", "src/**/*.tsx"]
+# ignorePaths = ["**/*.test.ts", "**/__fixtures__/**"]
+#
+# [[skills.triggers]]
+# type = "pull_request"
+# actions = ["opened", "synchronize", "reopened"]
+
+[[skills]]
+name = "find-bugs"
+remote = "getsentry/skills"
+paths = ["src/**/*.ts", "src/**/*.tsx", "script/**/*.ts"]
+ignorePaths = ["src/generated/**", "src/sdk.generated.*"]
+
+[[skills.triggers]]
+type = "pull_request"
+actions = ["opened", "synchronize", "reopened"]
+
+[[skills]]
+name = "security-review"
+remote = "getsentry/skills"
+paths = ["src/**/*.ts", "src/**/*.tsx"]
+ignorePaths = ["src/generated/**", "src/sdk.generated.*"]
+
+[[skills.triggers]]
+type = "pull_request"
+actions = ["opened", "synchronize", "reopened"]