
Boston Scientific
Boston Scientific is dedicated to transforming lives through innovative medical solutions that improve the health of patients around the world.
External Program
Submit bugs directly to this organization


Boston Scientific is dedicated to transforming lives through innovative medical solutions that improve the health of patients around the world.
External Program
Submit bugs directly to this organization
The scope of our vulnerability reporting program covers Boston Scientific products that contain software and includes on-market medical devices, Software as a Medical Device, implants, capital equipment, and mobile medical applications.
This program is not intended to provide technical support information on our products or for reporting adverse events or product quality complaints. To report an adverse event or a product quality complaint, please contact Boston Scientific per customer support and services.
Boston Scientific has an unwavering commitment to provide safe and secure products and has built a strong security program that is anchored in our Quality Management System. This system helps our organization reach the highest level of security through proactive monitoring and expedited responses when vulnerabilities are discovered.
Boston Scientific has developed a process to receive potential product security vulnerabilities from external sources, to validate their existence, and to determine how best to respond to improve product security and safety. In this context, a vulnerability is a security weakness that the submitter believes can be exploited. Please e-mail potential product security vulnerabilities to the Boston Scientific Product Security team at [email protected]. As a reminder, do not submit any data that contains individually identifiable health information and if possible, please submit the information in English. Please provide the following in your email:
For submissions provided that are within the scope of this process:
The process described here is not a guarantee, but rather a statement of Boston Scientific's intentions that is subject to change based on the circumstances of any situation.
If you have legal concerns about reporting vulnerabilities to Boston Scientific, please send an email to [email protected] informing Boston Scientific about your concerns prior to submitting any details through our product security reporting process.
Boston Scientific welcomes any research conducted and submitted in good faith, and in that regard please bear in mind:
By submitting information to Boston Scientific through this process, you are agreeing that submission of the information does not create any rights for you, that such information will be considered to be non-confidential and non-proprietary to you, and that Boston Scientific will be entitled to such information in whole or in part for any use or purpose whatsoever, without restriction and without compensating you or in any other way obligating Boston Scientific.
Note that at this time, Boston Scientific does not have a bug bounty program in place.