diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..3e4e5d32b0
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,24 @@
+# Security Policy
+
+## Supported Versions
+
+<!-- Please update the table below to reflect for which versions this project will receive security reports for -->
+
+| Version | Supported          |
+| ------- | ------------------ |
+| [`2.20`](https://github.com/openwebwork/webwork2/releases/tag/WeBWorK-2.20)    | :white_check_mark: |
+| [`2.19`](https://github.com/openwebwork/webwork2/releases/tag/WeBWorK-2.19)    | :white_check_mark: |
+| [`2.18`](https://github.com/openwebwork/webwork2/releases/tag/WeBWorK-2.18)    | :white_check_mark: |
+| <=[`2.17`](https://github.com/openwebwork/webwork2/releases/tag/WeBWorK-2.17)  | :x:                |
+
+## Reporting a Vulnerability
+
+**Please DO NOT report any security vulnerabilities through GitHub Issues**
+
+Rather, use the following email to report any security vulnerabilities:
+
+```
+thewebworkproject@gmail.com
+```
+
+We will respond to all security reports within `<number>` days.