diff --git a/src/content/docs/support-and-community/community/contributing.mdx b/src/content/docs/support-and-community/community/contributing.mdx
index e25279ee..9263d18d 100644
--- a/src/content/docs/support-and-community/community/contributing.mdx
+++ b/src/content/docs/support-and-community/community/contributing.mdx
@@ -29,13 +29,18 @@ Other channels:
 
 For logs, crash reports, CPU samples, and AI conversation IDs, see [Sending feedback and logs](/support-and-community/troubleshooting-and-support/sending-us-feedback/).
 
-## Reporting security issues
+## Reporting a security vulnerability
 
 :::danger
 Do not file public issues for security vulnerabilities.
 :::
 
-Email [security@warp.dev](mailto:security@warp.dev) with reproduction steps, impact, and any proof of concept. We'll acknowledge receipt and coordinate a fix and disclosure. Full guidance is in [`CONTRIBUTING.md`](https://github.com/warpdotdev/warp/blob/master/CONTRIBUTING.md#reporting-security-issues).
+If you believe you've found a security vulnerability, follow responsible disclosure practices and do not open a public GitHub issue or pull request, as this could expose the vulnerability before a fix is available. Include reproduction steps, impact, and any proof of concept when you report it through one of the following channels:
+
+- **Email:** [security@warp.dev](mailto:security@warp.dev)
+- **GitHub Security Advisory:** [Open a private advisory](https://github.com/warpdotdev/Warp/security/advisories/new)
+
+We will acknowledge your report promptly and work with you to understand and resolve the issue as quickly as possible. Full guidance is in [`SECURITY.md`](https://github.com/warpdotdev/warp/blob/master/SECURITY.md#reporting-a-vulnerability).
 
 ## Code of conduct