diff --git a/README.md b/README.md
index 44af488..825e89e 100644
--- a/README.md
+++ b/README.md
@@ -74,7 +74,9 @@ See the [Privacy Policy](privacy-policy.md) for full details on what koridor doe
 
 ## Support & Contributing
 
-**Bug reports and vulnerabilities:** file an issue on [Gitea Issues](https://git.k-ops.eu/koridor/koridor-public/issues).
+**Bug reports:** file an issue on [Gitea Issues](https://git.k-ops.eu/koridor/koridor-public/issues).
+
+**Vulnerabilities:** report directly to koridor@k-ops.eu.
 
 **Contributing:** core development is handled internally. We do not currently accept external pull requests.