Bose (VDP)
External Program
Submit bugs directly to this organization
Bose (VDP)
Please provide detailed reports with reproducible steps. If the report is not detailed enough to reproduce the issue, the issue may not be marked as triaged.
Submit one vulnerability per report unless you need to chain vulnerabilities to provide impact.
When duplicates occur, we only triage the first report received (provided that it can be fully reproduced).
Only interact with accounts you own or with the explicit permission of the account holder.
Researchers should add headers to requests such as:
Bose looks forward to working with the security community to find vulnerabilities in order to keep our businesses and customers safe.
Open Scope — Accepts reports for all owned assets based on impact, even if not listed in scope.
Gold Standard Safe Harbor — Adheres to Gold Standard Safe Harbor.
Coordinated Vulnerability Disclosure — Standard coordinated vulnerability disclosure practices.
Top Response Efficiency — This program's response efficiency is above 90%.
Core Ineligible Findings are out of scope.