add security reporting link

diff --git a/README.md b/README.md
index 1ae7d1b96f92af1d52546cdb6253738c2b4ac79c..d5bfe6e20eb3227ee3ffc11c929b1291d79d29d4 100644 (file)
--- a/README.md
+++ b/README.md
@@ -404,6 +404,9 @@ To test that the code conforms to the style, `npm install` and run:
 
 This was originally forked from [buffer-browserify](https://github.com/toots/buffer-browserify).
 
+## Security Policies and Procedures
+
+The `buffer` team and community take all security bugs in `buffer` seriously. Please see our [security policies and procedures](https://github.com/feross/security) document to learn how to report issues.
 
 ## license