diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..022d009
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+anycastd uses trunk-based development model with periodic semver releases marked
+against master branch right when the target feature is completed for particular
+milestone. Which means the most recent release is considered stable, secure and
+contains all the most recent features.
+
+## Reporting a Vulnerability
+
+To make a report please use GitHub security section and click "Report a vulnerability"
+button to fill details. Please don't forget to add anycastd version, Ceph version
+and any other related details to reproduce the issue.