diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..ca7d08799
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,11 @@
+# Security Policy
+
+## Supported Versions
+
+We only support the latest release of Minecraft, and the latest release of our software.
+
+## Reporting a Vulnerability
+
+Vulnerabilities should be reported to our Discord bot, EngineHub Bot. The bot can be found in our [Discord server](https://discord.gg/enginehub).
+
+WorldEdit is designed to be an admin tool. We do not consider users being able to break limits or cause lag bugs _if they are given permission to run the commands_. Only performance issues resulting from players without permissions are considered security vulnerabilities.