Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi Team, I am Viperblitzz, a security researcher who discovered a vulnerability in an Ory application asset. Where is the appropriate place to report this vulnerability?

I previously contacted the security team via email two days ago, but have not yet received a response. Thank you have a good day!

<https://www.ory.com/docs/security-compliance/security#ory-bug-bounty-program|ory.com/docs/security-compliance/security#…>

I previously contacted the security team via email two days ago, but have not yet received a response

It takes time for us to review the requests. Please be patient.

Hi <@U0872ELHJ4F>

I hope you are doing well. Could you please follow up on this promptly? I have discovered a vulnerability in the Ory asset that has a sufficiently serious impact to require immediate attention.

Could you please invite me via the private program available on HackerOne?