Cynet is an authorized CVE Numbering Authority (CNA), recognized by MITRE.
CVE IDs for vulnerabilities in Cynet products are assigned directly by Cynet
View our Responsible Disclosure Policy
Security Advisories
Official security notifications for vulnerabilities identified and resolved in Cynet products and services. CVE IDs are assigned directly by Cynet as a MITRE-authorized CVE Numbering Authority (CNA).
Responsible Disclosure Policy
Reporting
Security researchers who discover vulnerabilities in Cynet products should report them to responsible-disclosure@cynet.com. Include a detailed description, reproduction steps, and potential impact assessment.
Timeline
Cynet acknowledges reports within 3 business days. We target remediation within 90 days of confirmed vulnerability. Researchers are notified before public disclosure. Critical exploits in the wild are prioritized on an accelerated timeline.
Safe Harbor
Cynet will not pursue legal action against researchers who report vulnerabilities in good faith, avoid privacy violations, do not disrupt services, and provide Cynet reasonable time to remediate before public disclosure.
Found a vulnerability?
Cynet's security team reviews all responsible disclosures. We acknowledge reports within 3 business days and work transparently through the remediation process.