Carrier Product Security Incident Response

The Carrier Product Security Incident Response Team (PSIRT) focuses on the identification, assessment, and disposition of the risks associated with security vulnerabilities within Carrier products, offerings, solutions, components and/or services.

Carrier PSIRT is a dedicated team of first responders responsible to deliver advanced support designed to contain and minimize the spread and impact of a product security event, incident, breach, and/or crises.

Carrier encourages reporters, including security researchers, end-users, and vendors, to contact us with any information relating to potential security flaws or vulnerabilities within any of our offerings.

Secure Communication for Vulnerability Reporting

Carrier welcomes responsible disclosure of security vulnerabilities affecting our products and services.

Because vulnerability reports may contain sensitive technical details, we strongly encourage the use of secure communication methods when submitting vulnerability information.

Preferred Secure Reporting Method: Encrypted Content (PGP)

For sensitive vulnerability details, please encrypt your message using OpenPGP (PGP) before sending email. Download full instructions here.

Encryption: OpenPGP (PGP)
Public Key: Download Carrier Product Security PGP Public Key
PGP Fingerprint: 8744 2AB6 27A4 EAB6 A82F 798D 5ED7 A15E 6180 7FB6

Download PGP Key here

Confidence from Discovery to Disclosure

If you believe you have discovered a security issue within any Carrier offering, please complete the form below to help us better understand the nature and scope of your finding:

Receipt of issue/concern notification will be provided within 48 hours.

First Name *

Last Name

Email Address *

Phone Number

Product Name *

Software / Firmware / Hardware Version *

Description of Issue / Concern *

Reproduction Steps *

Vulnerability Disclosure Policy

The Carrier Product Security Incident Response Team (PSIRT) employs a coordinated approach to vulnerability disclosure and publication. PSIRT determines the best path when issuing security advisories for our supported Carrier products and our affiliates. Whenever possible, published security advisories will be made publicly available on our Product Security website.

Reporters, Researchers, and Vendors are encouraged to engage Carrier and act responsibly and transparently, in alignment with our goal to respond effectively while protecting our customers. No external disclosure, discussions, or confirmation of issues will be released until after the PSIRT investigation is complete. Summary of steps taken:

Acknowledgement of Report
Investigation of Findings
Validation of Unique Vulnerability
Planned Remediation of Mitigations
Security Advisory Communication Plan
Disclosure of Vulnerability Publication