Netskope PSIRT is the centralized process through which Netskope customers, security researchers, industry groups, government organizations, or vendors report potential Netskope security vulnerabilities.
The Netskope team manages the receipt, investigation and internal coordination of security vulnerability information related to all Netskope products, offerings and websites. This team then coordinates with each individual Netskope product and solution team to investigate, and if needed, identify the appropriate response plan. Maintaining communication between all involved parties, both internal and external, is a key component of Netskope’s vulnerability response process.
We strongly believe in responsible and coordinated disclosures of vulnerabilities that may affect the services we provide. Public disclosure of vulnerabilities is an essential part of the vulnerability disclosure process and is one of the many paths that lead to making software better and enables learnings that makes the security community better.
Customers and other entitled users should report any potential security vulnerabilities they may discover in Netskope products or offerings via normal Netskope Technical Support processes.
Third party researchers and other security entities can report potential security vulnerabilities in Netskope products, offerings, or websites.
At Netskope, we take our responsibility to protect our users’ information and the services we provide to them very seriously.
Linked below is our Vulnerability Disclosure Policy. The Vulnerability Disclosure Policy describes what systems and types of research are covered under this policy, how to send us vulnerability reports, and how long we ask security researchers to wait before publicly disclosing vulnerabilities.
