Note about the security contact
diff --git a/README.md b/README.md
index d260d98..6f767f9 100644
--- a/README.md
+++ b/README.md
@@ -45,6 +45,10 @@
 Alternatively, you may send patches to slirp@lists.freedesktop.org
 mailing list.
 
+Security reports can be sent to samuel.thibault@ens-lyon.org
+with pgp key 900CB024B67931D40F82304BD0178C767D069EE6 (it can be found
+in the debian keyring for instance)
+
 ## Debugging
 
 To make slirp emit debugging prints, one can use for instance: