How can I report a vulnerability or security issue?

We take the security of ZITADEL very seriously. If you believe you have found a security vulnerability in ZITADEL, we encourage you to report it to us immediately.

Please do not report security-related findings publicly via GitHub issues. Public disclosure of a security vulnerability could put the Zitadel community at risk. Instead, please use our official vulnerability disclosure process.

Vulnerability Disclosure Process

Vulnerabilities should be reported through our dedicated vulnerability disclosure form. 

Vulnerability Disclosure Process

For more details on our vulnerability policy, including scope and expectations, please refer to our official policy document.

We appreciate your help in keeping ZITADEL and its community safe!