diff --git a/README.md b/README.md
index c82cd28..8d872f3 100644
--- a/README.md
+++ b/README.md
@@ -24,6 +24,10 @@ Visitor statistics for WordPress with focus on data protection, transparency and
 * If you think you’ve found a bug (e.g. you’re experiencing unexpected behavior), please post at the [support forums](https://wordpress.org/support/plugin/statify/) first.
 * If you want to translate this plugin you can do this [on WordPress Translate](https://translate.wordpress.org/projects/wp-plugins/statify/).
 
+## Responsible Disclosure ##
+
+You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.]( https://patchstack.com/database/vdp/49ecb4d5-27a2-4cac-b8a2-a647f4c29c86)
+
 ## Donations
 You can leave a donation
 [via Paypal](https://www.paypal.com/donate/?cmd=_donations&business=TD4AMD2D8EMZW).
diff --git a/readme.txt b/readme.txt
index 57a2e01..76b93b7 100644
--- a/readme.txt
+++ b/readme.txt
@@ -113,6 +113,9 @@ has to be added to the theme's `functions.php`. The condition has modified such
 * [Statify Widget](https://wordpress.org/plugins/statify-widget/) to display most popular content
 * [Statify Blacklist](https://wordpress.org/plugins/statify-blacklist/) to define a customized blacklist for referrer spam
 
+### How can I report security bugs? ###
+
+You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.]( https://patchstack.com/database/vdp/49ecb4d5-27a2-4cac-b8a2-a647f4c29c86)
 
 ## Changelog ##
 You can find the full changelog in [our GitHub repository](https://github.com/pluginkollektiv/statify/blob/master/CHANGELOG.md).