diff --git a/SECURITY.md b/SECURITY.md
index f1c7a113..8bf9aa69 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -2,7 +2,11 @@
 
 ## Reporting a Vulnerability
 
-To report a suspected vulnerability, please email support@cloudcannon.com.
+To report a suspected vulnerability, please either:
+
+- Privately report a vulnerability through GitHub at https://github.com/CloudCannon/pagefind/security
+- Email support@cloudcannon.com.
+
 Please do not report any suspected vulnerabilities through public issues.
 
 ## Supported versions