Merge pull request lightninglabs#1112 from starius/security-md

add SECURITY policy file

Author: starius

README.md

@@ -85,6 +85,8 @@ loopd --network=testnet
 ### Submit feature requests
 The [GitHub issue tracker](https://github.com/lightninglabs/loop/issues) can be
 used to request specific improvements or report bugs.
+Do not use public issues for security disclosures.
+Follow the instructions in [SECURITY.md](./SECURITY.md).
 
 ### Join us on Slack
 Join us on the

SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you believe you have found a security or privacy issue in Lightning Loop,
+please do not open a public GitHub issue.
+
+Instead, disclose it responsibly by following the instructions in the
+[lnd security policy](https://github.com/lightningnetwork/lnd/blob/master/SECURITY.md).