diff --git a/.well-known/security.txt b/.well-known/security.txt
new file mode 100644
index 00000000..7b2f4aa0
--- /dev/null
+++ b/.well-known/security.txt
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+Contact: mailto:security@typelevel.org
+Expires: 2026-02-19T02:39Z
+Encryption: openpgp4fpr:904c153733dbb0106915c0bd975be5bc29d92ca5
+Encryption: openpgp4fpr:1cae49948ee0a2d7154a2b62a335b107e9282548
+Preferred-Languages: en
+Canonical: https://typelevel.org/.well-known/security.txt
+Policy: https://github.com/typelevel/.github/blob/main/SECURITY.md
+-----BEGIN PGP SIGNATURE-----
+
+iIwEARYKADQWIQQUykrE/bANX4J6vAxZhkimXfZFBgUCZ7VK6BYcbm9yZXBseUB0
+eXBlbGV2ZWwub3JnAAoJEFmGSKZd9kUGRb0BAPhyXJCoTtFNGaxjjL+m7j/8ein2
+j4barWRaFQqbXfnnAP4oFYY4hRVOEzLPoU0CNPh0BT2sPUUp1lXwPjf7YS47CQ==
+=Ca5d
+-----END PGP SIGNATURE-----