diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index badc3c0..a8bf0cc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,6 +35,11 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           pip install -e ".[dev]"
+      - name: Dependency audit (warn-only)
+        continue-on-error: true
+        run: |
+          pip install pip-audit
+          pip-audit
       - name: black
         run: black --check aura tests
       - name: flake8
diff --git a/SECURITY.md b/SECURITY.md
index cc9c460..a5c5051 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -31,6 +31,12 @@ Out of scope:
 - Third-party models, tools, or adapters you attach to AURA
 - User agent code running under the harness
 
+## Dependency auditing
+
+The pull request and main-branch CI workflow runs `pip-audit` against the installed Python dependencies. It is configured as a warn-only check with `continue-on-error: true` for one release cycle while the project establishes a clean baseline. A dependency finding therefore does not block CI yet; maintainers may make the check required once the baseline is clean.
+
+A green audit does not guarantee that every dependency is free of vulnerabilities. Keep dependencies updated and report vulnerabilities in AURA itself using the private reporting process above.
+
 ## Audit logs
 
 Session exports may contain sensitive data from your agent runs. Store `.aura/sessions/` and export files with appropriate access controls. AURA does not encrypt logs by default in v0.1.