diff --git a/SECURITY.md b/SECURITY.md
index b3c9468..c87823f 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -6,6 +6,6 @@ We always recommend using the latest version of PostHog to ensure you get all se
 
 ## Reporting a Vulnerability
 
-Please report security vulnerabilities to security-reports@posthog.com.
+Security vulnerabilities and other security related findings can be reported through our [vulnerability disclosure program](https://bugcrowd.com/engagements/posthog-vdp-pro) or by email to [security-reports@posthog.com](mailto:security-reports@posthog.com).
 
-We currently operate a vulnerability disclosure program and reward valid, high quality reports with merch.
+We do not operate a bug bounty program, but we reward valid, actionable reports with merch.