diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..119d9c9
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,12 @@
+# Security Policy
+
+## Supported Versions
+
+As deer-flow doesn't provide an offical release yet, please use the latest version for the security updates.
+Current we have two branches to maintain: 
+* main branch for deer-flow 2.x
+* main-1.x branch for deer-flow 1.x 
+
+## Reporting a Vulnerability
+
+Please go to https://github.com/bytedance/deer-flow/security to report the vulnerability you find.