diff --git a/readme.md b/readme.md
index 2193c92..13298a3 100644
--- a/readme.md
+++ b/readme.md
@@ -43,6 +43,20 @@ console.log(conf.get('awesome'));
//=> undefined
```
+---
+
+
+
+---
+
## API
@@ -127,6 +141,11 @@ conf.all = {
```
+## Security
+
+To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security). Tidelift will coordinate the fix and disclosure.
+
+
## License
[BSD license](http://opensource.org/licenses/bsd-license.php)