diff --git a/CHANGES b/CHANGES
index 7fee91f98e..b3ec944aac 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+7.2.0-dev.77 | 2025-01-13 08:21:51 -0700
+
+  * Add SECURITY.md, pointing at the website (Tim Wojtulewicz, Corelight)
+
 7.2.0-dev.72 | 2025-01-11 17:36:31 +0100
 
   * Mark `swap` specialization `noexcept` (Benjamin Bannier, Corelight)
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000000..f26fd2e286
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security Policy
+
+Zeek's Security Policy is defined on our website at https://zeek.org/security-reporting/
+
+Our Security Release Process is further clarified at https://github.com/zeek/zeek/wiki/Security-Release-Process
diff --git a/VERSION b/VERSION
index 8937bbae34..3560bf7078 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-7.2.0-dev.75
+7.2.0-dev.77