diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 00000000..5d98df65
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1,23 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported |
+|---------|-----------|
+| Latest  | ✅        |
+| 0.29.*  | ✅        |
+| < 0.29.0  | ❌        |
+
+## Reporting a Vulnerability
+
+Please do not open a public GitHub issue for security vulnerabilities.
+
+Instead, report them privately using one of the following:
+- GitHub Private Security Advisory (Security tab → "Report a vulnerability")
+- Email: arceusthe@gmail.com
+
+Please include a description of the vulnerability, steps to reproduce,
+the affected version, and impact assessment if possible.
+
+I will acknowledge receipt within 72 hours and aim to release a fix
+within 90 days. Public disclosure will be coordinated with the reporter.