
McKesson
The leading healthcare company for wholesale medical supplies & equipment, pharmaceutical distribution, and healthcare technology solutions.
External Program
Submit bugs directly to this organization


The leading healthcare company for wholesale medical supplies & equipment, pharmaceutical distribution, and healthcare technology solutions.
External Program
Submit bugs directly to this organization
We support coordinated vulnerability disclosure and encourage responsible reporting by security researchers and by customers to McKesson. This page describes our practice for addressing potential vulnerabilities in our systems and services.
If you would like to report a vulnerability or have a security concern regarding McKesson systems or services, please submit it in the form below or email [email protected]. If you wish to protect your email, you may use our PGP Key.
Please provide any supporting material including URLs, versions, inputs, outputs, steps to reproduce, etc., that would be useful in helping us understand the nature of the vulnerability.
The following activities are out of scope for McKesson Coordinated Vulnerability Disclosure Program. Conducting any of the activities below will result in permanent disqualification.
If applicable, McKesson will coordinate public disclosure of validated vulnerabilities with you. We respectfully ask that our respective public disclosures be posted simultaneously.
McKesson requests that you do not post or share any information about a potential vulnerability in any public setting until we have researched, responded to, and addressed the reported vulnerability, and informed other parties as needed. Also, we respectfully ask that you do not access, post, or share any data belonging to our customers, patients, business partners, and employees.
We look forward to working with security researchers who share our passion for protecting McKesson customers. You agree that submitting information does not create any rights for you or any obligation of payment from McKesson.