diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..440eb812
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,15 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest stable version of Strix is supported with security updates.
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in Strix, please do **not** open a public issue. We take security seriously and want to fix exploits responsibly.
+
+Please report vulnerabilities privately by:
+- Sending an email to **hi@usestrix.com** with details of the vulnerability and reproduction steps.
+- Or utilizing GitHub's private vulnerability reporting feature on the repository.
+
+We will acknowledge your report within 48 hours and work with you to release a security patch.