Auto-ISAC Member Company Vulnerability Disclosure Programs (VDPs)
Responsible Disclosure
Auto-ISAC Members are dedicated to ensuring the security of their products and welcome engagement with responsible security researchers. We recognize that the researcher community may not always be able to reach the appropriate stakeholder(s) to responsibly report a security issue(s). We accordingly have created this page as a resource for security researchers.
We have identified some Member vulnerability disclosure programs below. Should you care to reach one of our Members that does not appear on this list to responsibly report a vulnerability, please contact us and we will assist to the extent possible.
Links to our Members’ Vulnerability Disclosure Programs (VDPs)
-
Allison Transmission
Product Cybersecurity Vulnerability Disclosure
-
Bosch
Bosch Product Security Incident Response Team (PSIRT)
-
Continental
Continental Product Security Incident Response Management
-
Cummins
Cummins Cybersecurity Responsible Disclosure
-
e:fs TechHub GmbH
Product Security Incident Response Team (PSIRT)
-
Ford
Vulnerability Disclosure Program
-
GM
Vulnerability Disclosure Program
-
Harman
Report a vulnerability
-
Hyundai
Hyundai Vulnerability Reporting
-
Infineon
Cyber Defense Center (CSIRT) and PSIRT
-
John Deere
Vulnerability Disclosure Program
-
Kia America, Inc.
Vulnerability Reporting Program
-
Knorr-Bremse
Please email
-
Lear
Product Security Incident Response Team (PSIRT)
-
LG Electronics
LG Electronics Bug Bounty Program
-
Luminar
Responsible Security Disclosure Program
-
Mercedes-Benz AG
Vulnerability Disclosure Program
-
NXP
Product Security Vulnerability
-
Renesas
Product Security Incident Response Team (PSIRT)
-
Toyota
Vulnerability Disclosure Program
-
Volvo Cars
Vulnerability Reporting
-
Motional
Security Reporting System
Disclaimers
THIS INFORMATION IS PROVIDED ON AN AS IS BASIS. YOUR USE OF THE INFORMATION OR MATERIALS LINKED HEREIN IS AT YOUR OWN RISK. MEMBERS HAVE SOLE RESPONSIBILITY FOR HOW THEY HANDLE REPORTED VULNERABILITIES, AND THE LINKED PAGES MAY NOT BE CURRENT.