diff --git a/README.md b/README.md
index fadd847..2ef418f 100644
--- a/README.md
+++ b/README.md
@@ -8,3 +8,14 @@ Currently this exports uptime statistics using the `probe_success` metric from p
 
 Commits to the main branch must follow [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) and uses Release Please to create new versions.
 
+## Security
+
+Authentication and authorisation are performed through an HTTP bearer token, which is relayed to the Kubernetes API. The Kubernetes AAD integration then performs its authentication and resource authorisation checks, and the result is relayed to the user.
+
+## Contributing
+
+Read our [contributing guidelines](./CONTRIBUTING.md)
+
+------------------
+
+[Security notification](./SECURITY.md)