diff --git a/static/.well-known/security.txt b/static/.well-known/security.txt
new file mode 100644
index 0000000..f496742
--- /dev/null
+++ b/static/.well-known/security.txt
@@ -0,0 +1,6 @@
+# sops security reporting — see https://github.com/getsops/sops/security/policy
+Contact: https://github.com/getsops/sops/security/advisories/new
+Expires: 2027-07-14T00:00:00.000Z
+Preferred-Languages: en
+Canonical: https://getsops.io/.well-known/security.txt
+Policy: https://github.com/getsops/sops/security/policy