Want to report a potential security issue?

At ZITADEL we are extremely grateful for security aware people who disclose vulnerabilities to us and the open source community. All reports will be investigated by our team and we will work with you closely to validate and fix vulnerabilities reported to us.

https://zitadel.com/docs/legal/policies/vulnerability-disclosure-policy

We also follow RFC 9116 "A File Format to Aid in Security Vulnerability Disclosure" to find the security information for our websites and services.