As a component of DHS, CBP has a globally deployed and highly integrated information and communications technology infrastructure. Numerous DHS/CBP technologies are embedded within critical infrastructure systems and play varying roles in supporting continuous homeland security operations.
CBP’s information systems are essential in advancing our mission to safeguard the American people, secure our borders, and enhance the nation’s economic prosperity. In carrying out this mission, we are committed to ensuring the ongoing security of our information systems.
CBP recognizes the important role security researchers play in securing organizations and the internet. Therefore, CBP encourages the reporting of any vulnerabilities discovered in its internet-accessible information systems, applications, and websites. Information provided under this policy will be used solely for defensive purposes, primarily to mitigate or resolve vulnerabilities within our networks. This initiative supports the DHS motto “See Something – Say Something” in the digital world by promoting constructive engagement and establishing a communication loop between researchers and CBP.
Before submitting vulnerability information, please review our Vulnerability Disclosure Policy (VDP).
If you have a vulnerability of CBP systems that you would like to submit for consideration, please visit the CBP Responsible Disclosure site.
You are now leaving an official website of the United States Government (USG), the Department of Homeland Security (DHS), and U.S. Customs and Border Protection (CBP). Links to non-USG, non-DHS, and non-CBP sites are provided for your convenience and do not imply endorsement by the USG, DHS, or CBP of any commercial or private entities, products, or services. Please note that the privacy policy and terms of service of the linked site may differ from those of the USG, DHS, and CBP.
- You are leaving a CBP operated site and entering a non-federal Web site.
- This external link provides Vulnerability Disclosure services and no other services for CBP.
- Linking to this non-federal site does not constitute an endorsement by CBP or any of its employees of the sponsors or the information and products presented on the site.
- You will be subject to the destination site’s privacy policy when you leave this site.
- You should read the ResponsibleDisclosure.com Terms of Service when visiting the site
These websites constitute “information systems” as defined by 44 U.S.C. 3502(8).