diff --git a/SECURITY.md b/SECURITY.md
index ba034aa2..e13faffc 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -8,7 +8,13 @@ Currently, we support security patches by committing changes and bumping the ver
 
 ## Reporting a Vulnerability
 
-Found a vulnerability? Please email us:
+Preferred method: use GitHub's private vulnerability reporting flow:
+https://github.com/arc53/DocsGPT/security
+
+Then click **Report a vulnerability**.
+
+
+Alternatively:
 
 security@arc53.com