diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..7c10807a4
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,10 @@
+# Reporting security issues
+
+If you believe you have found a security issue in the CKEditor software, please contact us immediately.
+
+When reporting a suspected security problem, please bear this in mind:
+
+*   Make sure to provide as many details as possible about the vulnerability.
+*   Please do not disclose publicly any security issues until we fix them and publish security releases.
+
+Contact us at hello@nocobase.com. As soon as we receive the security report, we'll work promptly to confirm the issue and then to provide a security fix. You will receive a response from us within 7 working days.