diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..2cfda1a800
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,3 @@
+To report vulnerabilities in Angular itself, email us at security@angular.io.
+
+For more information on Angular's security policy visit: https://angular.io/guide/security