diff --git a/readme.md b/readme.md
index 854188a..48a7329 100644
--- a/readme.md
+++ b/readme.md
@@ -6,8 +6,14 @@ on the [AT Protocol](https://atproto.com).
 
 Read the introduction to Tangled [here](https://blog.tangled.sh/intro).
 
-Documentation:
+## docs
+
 * [knot hosting
 guide](https://tangled.sh/@tangled.sh/core/blob/master/docs/knot-hosting.md)
 * [contributing
 guide](https://tangled.sh/@tangled.sh/core/blob/master/docs/contributing.md)—**read this before opening a PR!**
+
+## security
+
+If you've identified a security issue in Tangled, please email
+[security@tangled.sh](mailto:security@tangled.sh) with details!