diff --git a/static/.well-known/security.txt b/static/.well-known/security.txt
new file mode 100644
index 0000000..f41bc2d
--- /dev/null
+++ b/static/.well-known/security.txt
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
+Contact: mailto:mail@vanilla.engineering
+Expires: 2025-12-31T23:59:59.000Z
+Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/5B915CFDC655CFDAF5D0564AD105DAF2EA1AD9BD
+Preferred-Languages: de, en
+Canonical: https://vanilla.engineering/.well-known/security.txt
+
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYKAB0WIQQWhIB8fWxn/ZpJUGKXYgXBAjN4LQUCZdyTqAAKCRCXYgXBAjN4
+LetyAP4+8rp9YmhDPP+8xCRWVui9rCdJ5+9JYGvD/ZR8HxLP+QD7BmW/BgMK/KDT
+DN9GL962OTp91veQckBCxULhbKQ+GAI=
+=WN4M
+-----END PGP SIGNATURE-----