diff --git a/.well-known/security.txt b/.well-known/security.txt
new file mode 100644
index 0000000..b418e8b
--- /dev/null
+++ b/.well-known/security.txt
@@ -0,0 +1,6 @@
+# Security vulnerability reporting for the MISP Project
+# is handled by CIRCL Computer Incident Response Center Luxembourg
+
+Contact: https://www.circl.lu/contact/
+Encryption: http://pgp.circl.lu/pks/lookup?op=get&search=0xEAADCFFC22BD4CD5
+Policy: https://github.com/MISP/MISP/blob/2.4/CONTRIBUTING.md#reporting-security-vulnerabilities