This files usually contains:

• Security policy
• Vulnerability reporting process
• Contact information for security issues
• Response time expectations
• Disclosure guidelines