Responsible Disclosure Program Security Support Tickets

All customers, even those with free subscription plans, can report security concerns. Please read Auth0's Vulnerability Disclose Policy for more information before submitting a security concern.

If you would like to publish your findings, you must submit the report directly to us at psirt@okta.com, preferably using our GPG encryption key.

If you would like to be rewarded, the Bugcrowd’s standard disclosure terms apply, and you must submit via Bugcrowd to be rewarded for your submission. For more information, visit Auth0's bug bounty program.

For legal information, read Legal Details.

Learn more