Responsible Disclosure

This page will list the existing disclosure programs and contacts for OEMs, suppliers, etc.
Original Equipment Manufacturer (OEM)
General Motors (GM)
General Motors - Vulnerability Disclosure Program | HackerOne
The General Motors Vulnerability Disclosure Program enlists the help of the hacker community at HackerOne to make General Motors more secure. HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited.
hackerone.com
Fiat Chrysler Automobiles (FCA)
FCA’s bug bounty program | Bugcrowd
Learn more about FCA’s bug bounty program powered by Bugcrowd, the leader in crowdsourced security solutions.
bugcrowd.com
Ford
Ford - Vulnerability Disclosure Program | HackerOne
The Ford Vulnerability Disclosure Program enlists the help of the hacker community at HackerOne to make Ford more secure. HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited.
hackerone.com
BMW
How to report vulnerabilities
www.bmwgroup.com
Daimler / Mercedes
Vulnerability Reporting Policy | Daimler
We value the work of security researchers & whitehat hackers! Our principles and disclosure guidelines for vulnerability reporting: read more...
www.daimler.com
HackerOne
This community-curated security page documents any known process for reporting a security vulnerability to Daimler, often referred to as vulnerability disclosure (ISO 29147), a responsible disclosure policy, or bug bounty program.
hackerone.com
​
Suppliers
Bosch
About us
The Bosch Product Security Incident Response Team (PSIRT) is the central point of contact for external security researchers, partners, and customers to report security information related to products developed by Bosch and its brands. Among others, these brands include Junkers, Nefit, Buderus and Dremel.
psirt.bosch.com
Other
Free Bug Bounty Program and Coordinated Vulnerability Disclosure | Open Bug Bounty
Report a vulnerability or start a free bug bounty program via Open Bug Bounty vulnerability disclosure platform.
www.openbugbounty.org
​
Knowledge - Previous
Security Library
Next - Knowledge
Attack Vectors
Last updated 10 months ago