
Druva Software
Druva’s cloud-native SaaS platform delivers data security, rapid ransomware recovery, backup protection, & is AI-powered for total cyber resilience. Try it today!
External Program
Submit bugs directly to this organization


Druva’s cloud-native SaaS platform delivers data security, rapid ransomware recovery, backup protection, & is AI-powered for total cyber resilience. Try it today!
External Program
Submit bugs directly to this organization
Druva is committed to keeping our systems, data and product(s) secure. Despite the measures we take, security vulnerabilities will always be possible.
If you believe you've found a security vulnerability, please send it to us by emailing [email protected]. Please include the following details with your report:
We will respond to your report within 5 business days of receipt and will attempt to keep you regularly informed of our progress toward resolving the vulnerability. If you have followed the above instructions, we will not take any legal action against you regarding the report.
To encourage vulnerability research and to avoid any confusion between legitimate research and malicious attack, we ask that you:
Druva's domains and their respective subdomains, in scope for this policy are listed below, including client applications and virtual appliances Druva provides for services provided on these domains: