diff --git a/README.rst b/README.rst
index fb4c5b91..3f924b58 100644
--- a/README.rst
+++ b/README.rst
@@ -543,3 +543,10 @@ See `Contributors <https://github.com/fmtlib/fmt/graphs/contributors>`_ and
 `Releases <https://github.com/fmtlib/fmt/releases>`_ for some of the names.
 Let us know if your contribution is not listed or mentioned incorrectly and
 we'll make it right.
+
+Security Policy
+---------------
+
+To report a security issue, please disclose it at [security advisory](https://github.com/fmtlib/fmt/security/advisories/new).
+
+This project is maintained by a team of volunteers on a reasonable-effort basis. As such, please give us at least 90 days to work on a fix before public exposure.