diff --git a/SECURITY.md b/SECURITY.md
index 3b8ffac2b..320b2ff54 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -3,3 +3,5 @@
 ### Reporting a Vulnerability
 
 Please report (suspected) security vulnerabilities to **[bjorn.erik.pedersen@gmail.com](mailto:bjorn.erik.pedersen@gmail.com)**. You will receive a response from us within 48 hours. If we can confirm the issue, we will release a patch as soon as possible depending on the complexity of the issue but historically within days.
+
+Also see [Hugo's Security Model](https://gohugo.io/about/security-model/).