Security Disclosure

How Do I Report a Security Issue?

We’re extremely grateful for responsible security researchers that report vulnerabilities to us. All reports are thoroughly investigated by CoreOS engineers.

To make a report, please email security@coreos.com with the full details, including steps to reproduce the issue.

Report a Vulnerability

Urgent Issues

If you are reporting an issue that you believe needs urgent attention, please include [URGENT] in your email subject (including the brackets).

Encrypting Sensitive Security Information

You can use the security team’s PGP key to encrypt sensitive information about a security vulnerability and to verify the authenticity of email sent to you from CoreOS.

Download our GPG key

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: SKS 1.1.0
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=Lkly
-----END PGP PUBLIC KEY BLOCK-----