If you believe your organization meets the criteria to be eligible to receive vulnerability alerts please fill out the form below.
Product Creators Vulnerability Alert Registry
Criteria for Participation
- Have a contact who will respond to emails within a week and understands how Zephyr is being used in the product.
- Have a publicly listed product based on some release of Zephyr.
- Have an actively monitored security email alias.
- Accept the Zephyr Embargo Policy that is outlined below.
Removal: If a member stops adhering to these criteria after joining the list then the member will be unsubscribed.
More information on Zephyr’s Security and Disclosure practices can be found at Security.