A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

# Akamai uses HackerOne for responsible disclosure using
# separate, invite-only programs for specific scopes:
# Akamai CDN:                      https://hackerone.com/akamai?type=team
# Akamai Connected Cloud / Linode: https://hackerone.com/linode?type=team
Policy: https://www.akamai.com/site/en/documents/corporate/2024/security-research-agreement.pdf

# In addition, we welcome _all_ types of security reports via email:
Contact: mailto:security@akamai.com
Encryption: https://www.akamai.com/site/en/documents/corporate/akamai-security-general.pub

# Please send abuse reports to:
Contact: mailto:abuse@akamai.com

Hiring: https://www.akamai.com/careers

Preferred-Languages: en