ZevVulnerability Disclosure

Zev Vulnerability Disclosure Program

Found a security issue? Report it to us, anonymously — no account needed. We aim to acknowledge reports within 48 hours.

Report a vulnerabilityCheck report status

In scope

  • Web applications
  • APIs
  • Mobile applications

Out of scope

  • Social engineering
  • DoS attacks
  • Physical security

Severity guide

CriticalHighMediumLowInfo

Safe harbor

We will not pursue or support legal action against researchers who report in good faith, avoid privacy violations and service disruption, and give us reasonable time to remediate before disclosing. Act in good faith and we'll work with you.

Vulnerability Disclosure · ZEV