Everything Anthropic publishes
A

Anthropic

Responsible Disclosure Policy

/responsible-disclosure-policy

landing
Words
1,380
Reading time
6 min
Last crawled
2026-09-26
Cited by
1 of their pages
Language
EN
A1

Opening

Last updated Feb 14, 2025 The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities.

A2

Purpose

At Anthropic, our mission is to ensure artificial intelligence benefits humanity. Central to this mission is our commitment to the security and integrity of our systems, services, and the data entrusted to us by our user

A3

Scope of Systems

This Policy covers all internet-facing information systems, applications, or websites owned, operated, or controlled by us, including any web or mobile applications hosted on those websites, including the Anthropic domai

A4

Scope of Vulnerabilities

This Policy covers technical vulnerabilities that potentially exist on our Information Systems such as misconfigurations, CSRFs or cross site request forgeries, privilege escalation attacks, SQL Injection, XSS, and direc

A5

How to Submit a Report

If you discover a security vulnerability in an Anthropic system, please promptly report it to us here. Include a detailed summary and any supporting details (logs, code, proofs of concept) to help us understand, validate

A6

Your Expectations of Us

All good-faith reports will be taken seriously. Upon promptly and responsibly reporting any potential vulnerability you have discovered, you can expect us to promptly evaluate your findings. If we determine (at our sole

A7

Safe Harbor

If you, in our sole determination, make a good faith effort to research and disclose vulnerabilities in accordance with this Policy and the above Research Guidelines, we will not pursue any legal action because of your r

A8

Changes to this Policy

We reserve the right to make changes to this Policy at any time by publishing a new policy and amending the date of last update. Vulnerabilities disclosed prior to any update of this Policy will remain subject to the the

8 in stockinsert query