diff --git a/SECURITY.md b/SECURITY.md
index 218961e..69234c3 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -2,6 +2,6 @@
 
 GhostSoap handles the personal details of the person using it, so a flaw in how it stores or sends them matters.
 
-Please report a vulnerability privately through this repository's private vulnerability reporting (Security tab, 'Report a vulnerability'), not in a public issue. Include the version or commit, what you did, and what you saw.
+Please report a vulnerability privately through this repository's private vulnerability reporting (Security tab, 'Report a vulnerability', or <https://github.com/EquityBot/GhostSoap/security/advisories/new>), not in a public issue. Include the version or commit, what you did, and what you saw.
 
 In scope: anything that exposes the user's profile, requests or replies; sends data the user did not choose to send; or weakens the encryption of the state file.