diff --git a/.github/funding.yml b/.github/funding.yml
index 1a630e9..3c42bc3 100644
--- a/.github/funding.yml
+++ b/.github/funding.yml
@@ -1,3 +1,4 @@
 github: sindresorhus
 open_collective: sindresorhus
+tidelift: npm/copy-text-to-clipboard
 custom: https://sindresorhus.com/donate
diff --git a/.github/security.md b/.github/security.md
new file mode 100644
index 0000000..5358dc5
--- /dev/null
+++ b/.github/security.md
@@ -0,0 +1,3 @@
+# Security Policy
+
+To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security). Tidelift will coordinate the fix and disclosure.