diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..559f8129
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,23 @@
+# Security Policy
+
+This document outlines the security policy for rshell and what to do if you discover a security vulnerability in the project.
+Please do not share vulnerability details in a public forum, including GitHub discussions, issues, or pull requests.
+Report them privately so Datadog can investigate, coordinate remediation, and publish details after an appropriate disclosure period.
+
+## Supported Versions
+
+Datadog recommends using the latest released version of rshell.
+Security advisories for rshell identify affected versions and patched versions when a vulnerability is disclosed.
+
+## Reporting a Vulnerability
+
+If you discover a vulnerability in rshell, or any Datadog product, please submit details to the following email address:
+
+* [security@datadoghq.com](mailto:security@datadoghq.com)
+
+Please include the affected rshell version or commit, reproduction steps, expected impact, and any relevant proof-of-concept details.
+
+## Public Advisories
+
+Datadog follows a coordinated disclosure process for confirmed vulnerabilities.
+When public disclosure is appropriate, Datadog publishes a GitHub Security Advisory for this repository so users can find vulnerability history from the repository's Security tab.