Security Advisories and Disclosures

Plan your path toward a faster, more secure, and more resilient network designed for the applications and users that you support.

Get the white paper

Netskope One is a cloud-native platform that offers converged security and networking services to enable your SASE and zero trust transformation.

Learn about Netskope One

Netskope NewEdge is the world’s largest, highest-performing security private cloud and provides customers with unparalleled service coverage, performance and resilience.

Learn about NewEdge

The Netskope Cloud Exchange (CE) provides customers with powerful integration tools to leverage investments across their security posture.

Learn about Cloud Exchange

Intelligent Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Firewall, Next Generation Secure Web Gateway (SWG), and Private Access for ZTNA built natively into a single solution to help every business on its journey to Secure Access Service Edge (SASE) architecture.

Go to Products Overview

Netskope Next Gen SASE Branch converges Context-Aware SASE Fabric, Zero-Trust Hybrid Security, and SkopeAI-powered Cloud Orchestrator into a unified cloud offering, ushering in a fully modernized branch experience for the borderless enterprise.

Learn about Next Gen SASE Branch

Get your complimentary copy of the only guide to SASE design you’ll ever need.

Get the eBook

Learn about NewEdge

Lighted highway through mountainside switchbacks

Learn how we secure generative AI use

Learn about Zero Trust

Choose Netskope GovCloud to accelerate your agency’s transformation.

Learn about Netskope GovCloud

How to Use a Magic Quadrant and Other Industry Research
In this episode Max Havey, Steve Riley and Mona Faulkner dissect the intricate process of creating a Magic Quadrant and why it's much more than just a chart.

Play the podcast

How to Use a Magic Quadrant and Other Industry Research podcast

Read how Netskope can enable the Zero Trust and SASE journey through security service edge (SSE) capabilities.

Read the blog

Replay sessions from the fourth annual SASE Week.

Explore sessions

Explore the security side of SASE, the future of network and protection in the cloud.

Learn about Security Service Edge

Netskope is proud to participate in Vision 2045: an initiative aimed to raise awareness on private industry’s role in sustainability.

Find out more

Supporting Sustainability Through Data Security

Meet our team

Group of hikers scaling a snowy mountain

Learn about Professional Services

Learn about Training and Certifications

Netskope PSIRT

Advisories and Disclosures

Report a security vulnerability

Vulnerability Disclosure Policy

Netskope Product Security Incident Response Team (PSIRT)

Netskope PSIRT is the centralized process through which Netskope customers, security researchers, industry groups, government organizations, or vendors report potential Netskope security vulnerabilities.

The Netskope team manages the receipt, investigation and internal coordination of security vulnerability information related to all Netskope products, offerings and websites. This team then coordinates with each individual Netskope product and solution team to investigate, and if needed, identify the appropriate response plan. Maintaining communication between all involved parties, both internal and external, is a key component of Netskope’s vulnerability response process.

Advisories and Disclosures

We strongly believe in responsible and coordinated disclosures of vulnerabilities that may affect the services we provide. Public disclosure of vulnerabilities is an essential part of the vulnerability disclosure process and is one of the many paths that lead to making software better and enables learnings that makes the security community better.

Security Advisory ID	Severity Rating	Fix Version	Fix Description
NSKPSA-2023-003	Medium	Release101	Netskope NSClient is impacted by local privilege escalation vulnerability to terminate the NSClient
NSKPSA-2023-002	High	Release 100	Local privilege escalation using log files in Netskope Client
NSKPSA-2023-001	High	Release 100	Local privilege escalation vulnerability in Netskope Client
NSKPSA-2022-001	High	Release 92	Sensitive information stored in NSClient logs
NSKPSA-2021-002	High	Release 89	Local privilege escalation vulnerability in Netskope Client on macOS
NSKPSA2020-005	Critical	Release 81	Netskope Client Stack Buffer Overflow
NSKPSA2020-004	Critical	Release 81	Netskope Client Stack Buffer Overflow
NSKPSA2020-002	High	Release 79	Netskope Admin UI CSV Injection
NSKPSA2020-001	High	Release 78	Fix for Privilege Escalation Vulnerability Discovered in Netskope Windows Client

Report a security vulnerability

We appreciate your partnership and value your decision to make us one of your trusted security partners. We believe a partnership is centered on working together, delivering transparency and commitment to making it better. If you have questions or concerns please contact your Technical Success Manager or write to Netskope Product Security Incident Response Team, [email protected].

Customers

Third party researchers

Customers

Customers and other entitled users should report any potential security vulnerabilities they may discover in Netskope products or offerings via normal Netskope Technical Support processes.

Go to Technical Support

Third party researchers

Third party researchers and other security entities can report potential security vulnerabilities in Netskope products, offerings, or websites.

Vulnerability Disclosure Policy

At Netskope, we take our responsibility to protect our users’ information and the services we provide to them very seriously.

Linked below is our Vulnerability Disclosure Policy. The Vulnerability Disclosure Policy describes what systems and types of research are covered under this policy, how to send us vulnerability reports, and how long we ask security researchers to wait before publicly disclosing vulnerabilities.

Vulnerability Disclosure Policy