Report a Security Vulnerability

If you believe you have found a vulnerability in a Blue Coat product or service that has not been resolved, contact the Blue Coat Vulnerability Response Team at [email protected]. Please provide the following information:

• Product name and version number, or service name and date the vulnerability was observed.
• Description of the vulnerability.
• Instructions to duplicate the vulnerability (this can be written steps, a video, or a set of screen captures).
• Your name and company (if applicable).
• Your preferred contact information (email, phone, anonymous).
• Your GPG, PGP, or S/MIME certificate to allow for encrypted communication.

Blue Coat will confirm receipt of your report within 48 hours. The Vulnerability Response Team will contact you directly within 5 business days to confirm the vulnerability, ask for clarification, or to provide information as to why the observed behavior is not a vulnerability.

Blue Coat urges reporters to encrypt sensitive information to protect it from being viewed by unintended recipients. Blue Coat can exchange encrypted email with you using PGP, GPG, or S/MIME.