diff --git a/README.md b/README.md
index b9f554e..b449747 100644
--- a/README.md
+++ b/README.md
@@ -10,6 +10,10 @@
 
 Bitcoin Electrum client library. Supports plaintext, TLS and Onion servers.
 
+## Security Policy
+
+To report a security issue, please refer to the [security policy](SECURITY.md).
+
 ## Minimum Supported Rust Version (MSRV)
 
 This library should compile with any combination of features with Rust 1.75.0.
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..60d9235
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,20 @@
+# Security Policy
+
+To report security issues, either
+
+- send an email to `security AT bitcoindevkit DOT org` (not for support), or
+- open a security advisory on GitHub at
+[`https://github.com/bitcoindevkit/rust-electrum-client/security/advisories`](https://github.com/bitcoindevkit/rust-electrum-client/security/advisories).
+
+The following key may be used to communicate sensitive information to BDK via email:
+
+| Name | Fingerprint |
+| ---- | ----------- |
+| `security@bitcoindevkit.org` | `7416 BB25 5E60 E40D 482E 591B 7201 8930 A1FB 3444` |
+
+You can import the key by running the following command:
+```
+gpg --recv-keys 7416BB255E60E40D482E591B72018930A1FB3444 --keyserver hkps://keys.openpgp.org
+```
+
+You can also download it from [our website](https://bitcoindevkit.org/foundation/pgp/#security-disclosures).