Thank you for contacting us with information about vulnerabilities. This information will be put in use for further improving the quality of our services and Web sites.
Read me first
Before contacting us with information about vulnerabilities, please be sure to read it.
・We manage The Bug Bounty Program that we will pay a reward for those who discover and report vulnerabilities. In case of not covered Products, you cannot acquire the reward.
・Even if you do not participate in The Bug Bounty Program, you must comply with Terms and Conditions for Cybozu Bug Bounty Program Article 6 "Restrictions and Prohibited Matters".
・We ask for your cooperation in not telling other parties about any vulnerabilities. Your cooperation is greatly appreciated to prevent any damage to the users of our services and Web sites. For details on how to disclose vulnerability you reported us, please refer to our guidelines for third party disclosure of vulnerabilities.
・Please rest assured that Cybozu will bear the responsibility of taking appropriate measures, such as reporting the vulnerability to IPA. For details on how Cybozu will handle the vulnerability, please refer to our vulnerability handling policy.
To participate in the bugbounty program and report
To participate in the bugbounty program and report, please contact us from below.
To send report via the reporting site, you need an account. You can apply for an account from the form.
To report without participating in the bugbounty program
To report without participating in the bugbounty program, please contact us from below.