diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..65dee37
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,3 @@
+# Security
+
+See https://theorangeone.net/.well-known/security.txt.
diff --git a/scripts/build.sh b/scripts/build.sh
index 3d3adf7..349fb63 100755
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -34,3 +34,4 @@ cp $BASEDIR/static/keybase.txt $OUTPUT_DIR/keybase.txt
 
 mkdir -p $OUTPUT_DIR/.well-known/matrix
 cp $BASEDIR/static/matrix.json $OUTPUT_DIR/.well-known/matrix/server
+cp $BASEDIR/static/security.txt $OUTPUT_DIR/.well-known/security.txt
diff --git a/static/security.txt b/static/security.txt
new file mode 100644
index 0000000..efb11ca
--- /dev/null
+++ b/static/security.txt
@@ -0,0 +1,3 @@
+Contact: https://theorangeone.net/contact/#matrix
+Canonical: https://theorangeone.net/.well-known/security.txt
+Preferred-Languages: en