diff --git a/docs/topics/security.txt b/docs/topics/security.txt
index 549b473988..694bd3040e 100644
--- a/docs/topics/security.txt
+++ b/docs/topics/security.txt
@@ -281,6 +281,11 @@ security protection of the Web server, operating system and other components.
   list`_ which identifies some common vulnerabilities in web applications. While
   Django has tools to address some of the issues, other issues must be
   accounted for in the design of your project.
+* Django's dev server (as well as other application servers such as Gunicorn)
+  are vulnerable to `slow loris attacks`_. For this reason it is recommended
+  to use a reverse proxy (`like nginx`_) for your deployment.
 
 .. _LimitRequestBody: https://httpd.apache.org/docs/2.4/mod/core.html#limitrequestbody
 .. _Top 10 list: https://www.owasp.org/index.php/Top_10-2017_Top_10
+.. _slow loris attacks: https://en.wikipedia.org/wiki/Slowloris_(computer_security
+.. _like nginx: https://uwsgi.readthedocs.io/en/latest/tutorials/Django_and_nginx.html#basic-nginx