diff --git a/SECURITY.md b/SECURITY.md
index 68c8e65fa0..cc724007f5 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -10,4 +10,6 @@
 
 ## Reporting a Vulnerability
 
-Send and email to security@pnpm.io
+Submit your findings here: https://github.com/pnpm/pnpm/security/advisories
+
+**We do not operate a bounty program.**