diff --git a/.github/workflows/docs-build.yml b/.github/workflows/docs-build.yml
index ece3bbd248..aaa1780657 100644
--- a/.github/workflows/docs-build.yml
+++ b/.github/workflows/docs-build.yml
@@ -72,4 +72,5 @@ jobs:
         with:
           name: docs-build-output
           path: docs/build/
+          include-hidden-files: true
           retention-days: 1
diff --git a/docs/static/.well-known/security.txt b/docs/static/.well-known/security.txt
new file mode 100644
index 0000000000..5a8414c3e2
--- /dev/null
+++ b/docs/static/.well-known/security.txt
@@ -0,0 +1,5 @@
+Policy: https://github.com/immich-app/immich/blob/main/SECURITY.md
+Contact: mailto:security@immich.app
+Preferred-Languages: en
+Expires: 2026-05-01T23:59:00.000Z
+Canonical: https://immich.app/.well-known/security.txt
diff --git a/web/static/.well-known/security.txt b/web/static/.well-known/security.txt
new file mode 100644
index 0000000000..1cd9daa56a
--- /dev/null
+++ b/web/static/.well-known/security.txt
@@ -0,0 +1,7 @@
+# This site is running an Immich instance.
+# Immich-related security problems should be reported to the Immich security team.
+# Security problems related to this instance should be reported to its administration.
+Policy: https://github.com/immich-app/immich/blob/main/SECURITY.md
+Contact: mailto:security@immich.app
+Preferred-Languages: en
+Expires: 2026-05-01T23:59:00.000Z