diff --git a/README.md b/README.md
index 90f64ec7..6e1966e2 100644
--- a/README.md
+++ b/README.md
@@ -29,3 +29,9 @@ npx turbo build
 ```bash
 npx turbo test
 ```
+
+## Security
+
+This project is still in a very early and experimental phase. It has never been audited nor thoroughly reviewed for security vulnerabilities. DO NOT USE IT IN PRODUCTION.
+
+Please report any security issues you find to <security@openzeppelin.com>.
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..8b23055a
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,3 @@
+# Security
+
+Security vulnerabilities should be disclosed to the project maintainers by email to <security@openzeppelin.com>.