diff --git a/SECURITY-ACKNOWLEDGEMENTS.md b/SECURITY-ACKNOWLEDGEMENTS.md
new file mode 100644
index 00000000..6f0ab545
--- /dev/null
+++ b/SECURITY-ACKNOWLEDGEMENTS.md
@@ -0,0 +1,6 @@
+We would like to thank the following security researchers for their responsible disclosures:
+
+
+# 2024
+
+- xyzeva: [Github](https://github.com/xyzeva) | [email](mailto:xyzeva@riseup.net) | [website](https://kibty.town/)
diff --git a/src/security.txt b/src/security.txt
new file mode 100644
index 00000000..135210e7
--- /dev/null
+++ b/src/security.txt
@@ -0,0 +1,9 @@
+Contact: mailto:security@puter.com
+
+Expires: 2025-01-01T20:00:00.000Z
+
+Acknowledgments: https://github.com/HeyPuter/puter/blob/master/SECURITY-ACKNOWLEDGEMENTS.md
+
+Canonical: https://github.com/HeyPuter/puter/blob/master/src/security.txt
+
+Policy: https://github.com/HeyPuter/puter/blob/master/SECURITY.md
\ No newline at end of file
diff --git a/utils.js b/utils.js
index 049639d8..2e413e82 100644
--- a/utils.js
+++ b/utils.js
@@ -158,8 +158,12 @@ async function build(options){
     );
 
     const copy_these = [
-        'images', 'favicons',
-        'browserconfig.xml', 'manifest.json', 'favicon.ico',
+        'images', 
+        'favicons',
+        'browserconfig.xml', 
+        'manifest.json', 
+        'favicon.ico',
+        'security.txt',
     ];
 
     const recursive_copy = (src, dest) => {