diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..c436351
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,10 @@
+# Noosfero security
+
+## Reporting security issues in Noosfero
+
+Security vulnerabilities should be reported via an email to
+noosfero-security@listas.softwarelivre.org, which ia a private mailing list.
+Reported problems will be published after fixes are available.
+
+The members of the mailing list are people who provide Noosfero (Noosfero
+committers, mainly).
--
libgit2 0.21.2