diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..a63c1b1
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,10 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you've found a security issue in any openstack-k8s-operators repository,
+please report it confidentially to Red Hat's Product Security team.
+
+Details and contact information: https://access.redhat.com/security/team/contact
+
+Do not open a public GitHub issue for security vulnerabilities.