Security

CYVIATION finds and reports security defects in aircraft systems and coordinates their disclosure with manufacturers, operators and authorities. This section describes how we do that and where we publish the results.

• Vulnerability Disclosure Policy: what reporters can expect from us, our 45-day coordinated disclosure timeline, and how we assign CVE IDs.
• Security Advisories: the vulnerabilities we have published.
• Report a vulnerability: security@cyviation.aero (machine-readable: /.well-known/security.txt).