mirror of
https://github.com/crewAIInc/crewAI.git
synced 2026-05-04 16:52:37 +00:00
f990a05fc0
Address Copilot review feedback to use locale-prefixed paths for MCP security links (/en/mcp/security, /ko/mcp/security, etc.) to keep users in their selected language. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
23 lines
999 B
Plaintext
23 lines
999 B
Plaintext
---
|
|
title: Security Policy
|
|
description: Learn how to report security vulnerabilities and about CrewAI's security practices.
|
|
icon: shield
|
|
mode: "wide"
|
|
---
|
|
|
|
## Reporting Security Vulnerabilities
|
|
|
|
If you discover a security vulnerability in CrewAI, please report it responsibly through our Bugcrowd Vulnerability Disclosure Program (VDP):
|
|
|
|
**Submit reports to:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
|
|
|
|
<Warning>
|
|
**Do not** disclose vulnerabilities via public GitHub issues, pull requests, or social media. Reports submitted via channels other than Bugcrowd will not be reviewed.
|
|
</Warning>
|
|
|
|
For full details, see our [Security Policy on GitHub](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md).
|
|
|
|
## Security Resources
|
|
|
|
- **[MCP Security Considerations](/en/mcp/security)** — Best practices for securely integrating MCP servers with your CrewAI agents, including transport security, prompt injection risks, and server implementation advice.
|