diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..4b5c152
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,14 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you find a vulnerability, please send an email directly to:
+
+- Tianyu Chen <billchenchina2001@gmail.com>
+- ceabrobot <ceba_robot@163.com>
+- ruanxingzhi <ruanxingzhi@gmail.com>
+
+If the vulnerability has also affected the
+[upstream](https://github.com/vfleaking/uoj), please also cc:
+
+- Kaifeng Lyu <vfleaking@163.com>