diff --git a/install_files/securedrop-ossec-agent/etc/cron.daily/alert-out-of-date-os b/install_files/securedrop-ossec-agent/etc/cron.daily/alert-out-of-date-os
new file mode 100755
index 00000000000..97922e1c869
--- /dev/null
+++ b/install_files/securedrop-ossec-agent/etc/cron.daily/alert-out-of-date-os
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+check_release='/usr/lib/ubuntu-release-upgrader/check-new-release'
+send_alarm='/var/ossec/send_encrypted_alarm.sh'
+
+if [ "$(lsb_release -sc)" = 'trusty' ] && [ -x "$check_release" ] && [ -x "$send_alarm" ]; then
+    "$check_release" -q | "$send_alarm"
+fi