Source
Architecture, reliability & security assurance — found from sitemap — Proton VPN for Business
Checked for Proton VPN for Business on 5 Nov 2026
- Page
- https://proton.me/security/vulnerability-disclosure
- Checked
- 5 Nov 2026, 14:29 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:d18e764295986550ba427f98077eff2a3fa80acb6ff62732e814c01393779915
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Vulnerability disclosure policy Report an error
“We encourage security researchers to contact us to report potential vulnerabilities identified in Proton products.”
-
Vulnerability acknowledgement days Report an error
“Proton will acknowledge receipt of reports that comply with vulnerability disclosure policy within five (5) business days.”
-
Vulnerability disclosure embargo days Report an error
“we require that you refrain from sharing information about discovered vulnerabilities for 120 calendar days after you have received our acknowledgement of receipt of your report.”
-
Vulnerability safe harbor Report an error
“If you make a good faith effort to comply with this policy during your security research, we will consider your research to be authorized per Proton’s legal safe harbor policy.”
-
Security report email Report an error
“Reports are accepted via electronic mail at security@proton.me.”
-
Security report pgp encryption Report an error
“We encourage you to encrypt submissions using our PGP public key when submitting vulnerabilities.”
-
Anonymous reports Report an error
“Researchers may submit reports anonymously or provide contact information”
-
Disclosure scope products Report an error
“Proton Mail The mail.proton.me web app The api.protonmail.ch web app Proton Mail mobile apps (Android and iOS/iPad) Proton Bridge apps (GNU/Linux, macOS, and Windows)”
-
Entity name Report an error
“Proton AG Route de la Galaise 32 1228 Plan-les-Ouates Geneva, Switzerland”
-
Third party vulnerability sharing Report an error
“We may share vulnerability reports with affected vendors. We will not share the names or contact data of security researchers unless given explicit permission.”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The DevOps Engineer Architecture, reliability & security assurance
- The IT Lead Architecture, reliability & security assurance
- The MSP Technician Architecture, reliability & security assurance
- The Information Security Officer Architecture, reliability & security assurance
- The Skeptic Architecture, reliability & security assurance