diff --git a/config/httpd.conf b/config/httpd.conf
index 998b709..3d75f34 100755
--- a/config/httpd.conf
+++ b/config/httpd.conf
@@ -439,6 +439,8 @@ Alias "/static" "/var/www/jc/static/"
 </Directory>
 
 Alias "/robots.txt" "/var/www/jc/static/robots.txt"
+Alias "/.well-known/security.txt" "/var/www/jc/static/security.txt"
+
 
 <Files jc.wsgi>
    Require all granted
diff --git a/src/static/security.txt b/src/static/security.txt
new file mode 100644
index 0000000..a106fa4
--- /dev/null
+++ b/src/static/security.txt
@@ -0,0 +1,3 @@
+Contact: mailto:security@jakecharman.co.uk
+Expires: 2036-01-01T00:00:00.000Z
+Preferred-Languages: en
\ No newline at end of file