diff --git a/SECURITY.md b/SECURITY.md
index 4e240bc0..730d724a 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,5 +1,5 @@
 # Security Policy
 
-## Reporting a Vulnerability
+treq is covered by the [Twisted project security policy](https://github.com/twisted/twisted/security/policy).
 
-Please report security issues to `security@twistedmatrix.com`
\ No newline at end of file
+You can [privately report via GitHub](https://github.com/twisted/treq/security/advisories/new), or via email as described in the policy linked above.
diff --git a/changelog.d/336.misc.rst b/changelog.d/336.misc.rst
new file mode 100644
index 00000000..e69de29b