Vulnerability Reporting

Vulnerability Disclosure Form

Before submitting vulnerability information here, please read our Nextivity VDP Policy.

• We only accept vulnerability reports through this form for certain products, services and systems which are listed in our VDP.
• We do not support PGP-encrypted emails for vulnerability reports. For particularly sensitive information, use this (TLS-encrypted) form.

When you choose to share your contact information with us, we commit to coordinating with you as openly and as quickly as possible.

• Within 3 business days, we will acknowledge that your report has been received.
• To the best of our ability, we will confirm the existence of the vulnerability to you and be as transparent as possible about what steps we are taking during the remediation process, including on issues or challenges that may delay resolution.
• We will maintain an open dialogue to discuss issues.
• Any personally identifiable information requested is being collected solely to conduct feedback and dialog functions with submitters, as necessary.
• The information that you provide will be used by and disclosed to Nextivity personnel and contractors for the above-mentioned purpose. Do not provide personal information beyond what is explicitly asked for in any of the provided data fields.
• The disclosure of your personally identifiable information is voluntary. However, a failure to provide your email information will inhibit our ability to provide feedback regarding the reported matter.