The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities.
Purpose
At Anthropic, our mission is to ensure artificial intelligence benefits humanity. Central to this mission is our commitment to the security and integrity of our systems, services, and the data entrusted to us by our users and partners. We've established this responsible disclosure program to collaborate with security researchers who help identify potential vulnerabilities in our systems.
As part of our mission to advance safe and responsible AI development across the industry, we actively encourage researchers to work with other AI organizations. If you discover a vulnerability that affects multiple AI services, please submit separate reports to each affected organization. This helps ensure that all impacted services can properly assess and address the vulnerability.
Scope of Systems
This Policy covers all internet-facing information systems, applications, or websites owned, operated, or controlled by us, including any web or mobile applications hosted on those websites, including the Anthropic domain and related subdomains (collectively, “Information Systems”).
This Policy also does not cover any information systems, websites, or applications that are owned, operated, or controlled by any third party, including any service provider or contractor to the Company, even where under an Anthropic domain. You should comply with the responsible disclosure efforts for those other systems, websites, and applications.
Scope of Vulnerabilities
This Policy covers technical vulnerabilities that potentially exist on our Information Systems such as misconfigurations, CSRFs or cross site request forgeries, privilege escalation attacks, SQL Injection, XSS, and directory traversal attacks.
This Policy excludes the following vulnerabilities, subject to Anthropic’s discretion:
- general security, email best practices, or missing best practices in SSL/TLS configurations without a working proof-of-concept,
- physical compromise or intrusions,
- rate limiting or brute-force issues on non-authenticated endpoints,
- compromises involving an insider,
- social engineering (including phishing attempts),
- reflected file downloads,
- account takeovers (including any brute force attacks on accounts that are not yours),
- red-teaming, adversarial testing of our models,
- content issues with model prompts and responses,
- denial of service attacks,
- clickjacking on pages with no sensitive actions,
- missing HttpOnly or Secure flags on cookies,
- dependency hijacking, or
- any widely publicized zero-day vulnerabilities that have no patch or have only had a patch available for less than 30 days
We welcome reports concerning safety issues, “jailbreaks,” and similar concerns so that we can enhance the safety and harmlessness of our models. Please report such issues to modelbugbounty AT anthropic DOT com with enough detail for us to replicate the issue.
Research Guidelines
While we reserve final and sole discretion for whether you are acting in good faith and in accordance with this Policy, we will generally presume you are acting in good faith if you abide by this Policy for conducting security research and discovering potential vulnerabilities related to the Information Systems and agree to the following:
- You will use your
@wearehackerone.com email address when creating any accounts for the purpose of testing and add a X-HackerOne-Handle: <your handle> to your requests;
- You are testing Information Systems for the sole purpose of identifying or discovering a potential vulnerability or any associated indicator of a vulnerability and reporting such information to us;
- You will avoid causing any harm to the Information Systems, including avoiding any data destruction, use, access, or acquisition; disruption of Information - - Systems or any customer user experience (including initiating denial of service attacks or using tools that generate substantial amounts of traffic); violation or compromise of the privacy or security of our customers, employees, or other users; or other illegal or harmful activities;
- You will avoid exploiting any vulnerability beyond what is minimally required to reasonably prove that such potential vulnerability exists, including avoiding accessing, acquiring, or using data that may be accessible from exploiting the vulnerability;
- You will avoid accessing, acquiring, or using the content of any communications, data, or information transmitted or stored on the Information Systems, unless such access is inadvertent;
- You will not exfiltrate, download, or otherwise retain any data that you collect. If you inadvertently access any data, you will report such access to us as part of your report;
- You will avoid disclosing the existence of or any details relating to the discovered vulnerability to a third party or to the public until you have received prior written notice from us. NOTE: We fully support researchers' right to publicly disclose vulnerabilities they discover. We ask only to coordinate on the timing of such disclosures to prevent potential harm to our services, customers, and other parties. Researchers are free to report similar vulnerabilities in other services - we will never attempt to restrict such disclosures;
- You must not perform any attacks that would compromise the security or confidentiality of any account that is not your own;
- You must not perform any social engineering attacks (phishing, vishing, etc.) on any Anthropic employee, contractor, or representative;
- You must validate all vulnerabilities and provide a working proof of concept with your submission. False positive and/or theoretical reports from automated scanners or written by AI will be closed as "Not Applicable" at Anthropic's discretion;
- You must not, as a condition of disclosure, require payment or compensation, or otherwise make threats to disclose the vulnerability in an irresponsible manner;
- You must not be listed on the Specially Designated Nationals and Blocked Persons List as published by the U.S. Treasury Department of Office Foreign Assets Control (“OFAC”) or any other sanctions list, or reside in any country that has been sanctioned by the United States Government; and
- You, at all times, are in compliance with all applicable federal, state, and local laws in connection with your research activities.
- By submitting a report, you represent that you are the rightful author of the underlying work and grant Anthropic full rights to use the vulnerability report data (including sharing details with third-parties as needed) to address any vulnerabilities.
If you have any questions about this Policy or whether your research is consistent with these engagement guidelines, please contact disclosure AT anthropic DOT com
Your Expectations of Us
All good-faith reports will be taken seriously. Upon promptly and responsibly reporting any potential vulnerability you have discovered, you can expect us to promptly evaluate your findings. If we determine (at our sole discretion) that a vulnerability exists, you can expect us to validate the existence of the vulnerability, to confirm the same with you, and to promptly take appropriate steps to address, mitigate, or remediate the vulnerability to the extent feasible. Finally, you can expect us to collaborate expeditiously with you to support timely and safe disclosure of your findings.
If you provide your contact information, our representatives may contact you for further information. Additionally, we will:
- Protect your name and contact information and will not disclose such information without your consent, unless required by lawful legal process, law or court order;
- Refrain from taking legal action as further set forth in the Safe Harbor section below;
- With your permission, attribute your name and contribution on any public disclosure we make, to the extent we choose to make a public disclosure;
- Acknowledge your submission within three (3) business days; and
- Make best efforts to keep you updated and promptly complete our investigation and, if applicable, confirm our remediation strategy within an established timeline.
Safe Harbor
If you, in our sole determination, make a good faith effort to research and disclose vulnerabilities in accordance with this Policy and the above Research Guidelines, we will not pursue any legal action because of your research or responsible disclosure, subject to Anthropic’s compliance with applicable laws and legal obligations. To qualify for safe harbor, disclosures to us must be unconditional and may not involve extortion or threats.
Changes to this Policy
We reserve the right to make changes to this Policy at any time by publishing a new policy and amending the date of last update. Vulnerabilities disclosed prior to any update of this Policy will remain subject to the then-current policy in effect.
