diff --git a/public/.well-known/security.txt b/public/.well-known/security.txt
new file mode 100644
index 0000000..c137afc
--- /dev/null
+++ b/public/.well-known/security.txt
@@ -0,0 +1,22 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Contact: mailto:security@museum-digital.de
+Expires: 2022-12-31T23:00:00.000Z
+Encryption: https://museum-digital.org/security.museum-digital.de.asc
+Preferred-Languages: en,de,id
+
+-----BEGIN PGP SIGNATURE-----
+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+=EJhz
+-----END PGP SIGNATURE-----