diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..2aaac86a58
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,10 @@
+# Govdirectory Security Policy
+
+## Scope
+
+This policy is intended for all resources available on `*.govdirectory.org*` and any repository in the Govdirectory GitHub organization.
+
+## Reporting a Vulnerability
+
+You can privately report a vulnerability to the Govdirectory team by [creating a security advisory on GitHub](https://github.com/govdirectory/website/security/advisories/new). This report will be kept private while it is being assessed by the team.
+
diff --git a/static/.well-known/security.txt b/static/.well-known/security.txt
new file mode 100644
index 0000000000..b5efce4628
--- /dev/null
+++ b/static/.well-known/security.txt
@@ -0,0 +1,5 @@
+Contact: https://github.com/govdirectory/website/security
+Preferred-Languages: en
+Canonical: https://govdirectory.org/.well-known/security.txt
+Policy: https://github.com/govdirectory/website/blob/main/SECURITY.md
+
diff --git a/templates/standard-for-public-code.html b/templates/standard-for-public-code.html
index 95a32cbc5d..6b3a073560 100644
--- a/templates/standard-for-public-code.html
+++ b/templates/standard-for-public-code.html
@@ -366,7 +366,7 @@ <h2><a href="https://standard.publiccode.net/criteria/welcome-contributors.html"
 
 <h2><a href="https://standard.publiccode.net/criteria/make-contributing-easy.html" class="dark-link">Make contributing easy</a></h2>
 
-&#9744;<!-- &#9745; --> criterion met.
+&#9745;<!-- &#9745; --> criterion met.
 
 <table id="make-contributing-easy" style="width:100%">
 <tr><th class="js-sort-none">Meets</th><th class="js-sort-none">Requirement</th><th class="js-sort-none" style="width:25%">Notes and links</th></tr>
@@ -408,25 +408,25 @@ <h2><a href="https://standard.publiccode.net/criteria/make-contributing-easy.htm
 
 <tr>
 <td>
-
+Ok
 </td>
 <td>
 There MUST be a way to report security issues for responsible disclosure over a closed channel.
 </td>
 <td>
-
+<a href="/govdirectory/website/security/advisories">GitHub's security advisories</a>
 </td>
 </tr>
 
 <tr>
 <td>
-
+Ok
 </td>
 <td>
 The documentation MUST include instructions for how to report potentially security sensitive issues.
 </td>
 <td>
-
+<a href="/govdirectory/website/blob/main/SECURITY.md">SECURITY.md</a>
 </td>
 </tr>