# Security

NVIDIA is dedicated to the security and trust of our software products and services, including all source code repositories managed through our organization.

If you need to report a security issue, use the appropriate contact points outlined below. **Do not report security vulnerabilities through GitHub.**

## Reporting Potential Security Vulnerability in an NVIDIA Product

To report a potential security vulnerability in any NVIDIA product:
- Web: [Security Vulnerability Submission Form](https://www.nvidia.com/object/submit-security-vulnerability.html)
- E-Mail: psirt@nvidia.com
    - You can use the following PGP key for secure email communication: [NVIDIA public PGP Key for communication](https://www.nvidia.com/en-us/security/pgp-key)
    - Include the following information:
    - Product/Driver name and version/branch that contains the vulnerability
    - Type of vulnerability (code execution, denial of service, buffer overflow, etc.)
    - Instructions to reproduce the vulnerability
    - Proof-of-concept or exploit code
    - Potential impact of the vulnerability, including how an attacker could exploit the vulnerability

While NVIDIA currently does not have a bug bounty program, NVIDIA offers acknowledgement when an externally reported security issue is addressed under our coordinated vulnerability disclosure policy. Refer to the [Product Security Incident Response Team (PSIRT) policies page](https://www.nvidia.com/en-us/security/psirt-policies/) for more information.

## NVIDIA Product Security

For all security-related concerns, refer to the [NVIDIA Product Security portal](https://www.nvidia.com/en-us/security).
