From 429d03e3823d7dfeaf162321f033f2b667c9b554 Mon Sep 17 00:00:00 2001
From: Boris Cherny <boris@anthropic.com>
Date: Mon, 24 Feb 2025 10:17:54 -0800
Subject: [PATCH] Create SECURITY.md

---
 SECURITY.md | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..087e9697
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,12 @@
+# Security Policy
+Thank you for helping us keep Claude Code secure!
+
+## Reporting Security Issues
+
+The security of our systems and user data is Anthropic's top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities.
+
+Our security program is managed on HackerOne and we ask that any validated vulnerability in this functionality be reported through their [submission form](https://hackerone.com/anthropic-vdp/reports/new?type=team&report_type=vulnerability).
+
+## Vulnerability Disclosure Program
+
+Our Vulnerability Program Guidelines are defined on our [HackerOne program page](https://hackerone.com/anthropic-vdp).