diff --git a/DISCLOSURES.md b/DISCLOSURES.md
new file mode 100644
index 0000000..85313da
--- /dev/null
+++ b/DISCLOSURES.md
@@ -0,0 +1,19 @@
+# Responsible Disclosures
+
+This file serves as a professional log of security vulnerabilities, misconfigurations, and sensitive data leaks that I have identified and responsibly disclosed to the respective organizations.
+
+## Disclosure Log
+
+| Date | Target Organization | Issue Type | Status | Note |
+| :--- | :--- | :--- | :--- | :--- |
+| 2026-04-15 | Google (DeepMind/DevRel) | Exposed Gemini API Key | Disclosed | Key leaked during a public technical presentation; confirmed active via minimal testing. |
+
+---
+### Disclosure Policy
+I follow standard responsible disclosure practices:
+1. Identify the vulnerability/leak.
+2. Notify the affected party immediately via official channels.
+3. Provide details to help remediation.
+4. Document the occurrence here only after the organization has been notified.
+
+*Maintained by Fabian Ternis*