diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..aa4254e
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+I noticed your team uses Terraform heavily. Most teams at your stage haven't set up IaC security scanning yet — secrets in state files and open security groups are the #1 risk. Happy to share how others are solving this.
+
+Visit https://tfgaurd.com/ and please use and give feedback
+
+