diff --git a/docs/README.md b/docs/README.md
index 3dcd4b9073a..a4a5d6b351a 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -57,6 +57,8 @@ Documentation for other releases can be found at
* If something went wrong, see the [troubleshooting](troubleshooting.md) document for how to debug.
You should also check the [known issues](user-guide/known-issues.md) for the release you're using.
+* To report a security issue, see [Reporting a Security Issue](reporting-security-issues.md).
+
[]()
diff --git a/docs/reporting-security-issues.md b/docs/reporting-security-issues.md
new file mode 100644
index 00000000000..4081d9d42fd
--- /dev/null
+++ b/docs/reporting-security-issues.md
@@ -0,0 +1,57 @@
+
+
+
+
+
+
+
+
+
+
+
PLEASE NOTE: This document applies to the HEAD of the source tree
+
+If you are using a released version of Kubernetes, you should
+refer to the docs that go with that version.
+
+
+The latest 1.0.x release of this document can be found
+[here](http://releases.k8s.io/release-1.0/docs/reporting-security-issues.md).
+
+Documentation for other releases can be found at
+[releases.k8s.io](http://releases.k8s.io).
+
+--
+
+
+
+
+
+# Security
+
+If you believe you have discovered a vulnerability or a have a security incident to report, please follow the steps below. This applies to Kubernetes releases v1.0 or later.
+
+To watch for security and major API announcements, please join our [kubernetes-announce](https://groups.google.com/forum/#!forum/kubernetes-announce) group.
+
+## Reporting a security issue
+
+To report an issue, please:
+- Submit a bug report [here](http://goo.gl/vulnz).
+ - Select “I want to report a technical security bug in a Google product (SQLi, XSS, etc.).”
+ - Select “Other” as the Application Type.
+- Under reproduction steps, please additionally include
+ - the words "Kubernetes Security issue"
+ - Description of the issue
+ - Kubernetes release (e.g. output of `kubectl version` command, which includes server version.)
+ - Environment setup (e.g. which "Getting Started Guide" you followed, if any; what node operating system used; what service or software creates your virtual machines, if any)
+
+An online submission will have the fastest response; however, if you prefer email, please send mail to security@google.com. If you feel the need, please use the [PGP public key](https://services.google.com/corporate/publickey.txt) to encrypt communications.
+
+
+
+[]()
+