Document that we care about our infrastructure's security as well (#3874)
diff --git a/docs/security.rst b/docs/security.rst
index 1673b02..646b3e2 100644
--- a/docs/security.rst
+++ b/docs/security.rst
@@ -5,6 +5,14 @@
policies we have adopted to ensure that security issues are addressed in a
timely fashion.
+Infrastructure
+--------------
+
+In addition to ``cryptography``'s code, we're also concerned with the security
+of the infrastructure we run (primarily ``cryptography.io`` and
+``ci.cryptography.io``). If you discover a security vulnerability in our
+infrastructure, we ask you to report it using the same procedure.
+
What is a security issue?
-------------------------