Security

Security

Coordinated Vulnerability Disclosure

Aurora is committed to protecting the security and privacy of its business data, employee data, and most importantly, its customer data.

We don’t authorize penetration testing of our systems. However, if you believe you’ve discovered a security vulnerability in any of our products, services, or websites that could impact the confidentiality, integrity, or availability of Aurora’s systems or data, please contact security@aurora.tech with the following information:

  • The name of the product or the address of the service or website
  • The vulnerability class (cross-site scripting, improper authentication, path traversal, etc.)
  • Detailed instructions that allow us to reproduce your finding, including screenshots, videos, and code as needed
  • An attack scenario that explains how an attacker could exploit this vulnerability and what it would allow the attacker to do

If you wish, you may use the PGP key below to encrypt your emails.

We aim to respond to reported vulnerabilities within one business day to acknowledge receipt of your report. We will work with you in a coordinated fashion to share our timeframe to mitigate the vulnerability, and to notify you once the vulnerability has been mitigated.

We do not currently offer bug bounties.


pub rsa4096 2021-12-03 [SC] [expires: 2025-12-02]
BBDDB571B0E1017A3121889DD6776FF0F3022E4D
uid [ultimate] Aurora Innovation Security <security@aurora.tech>
sub rsa4096 2021-12-03 [E] [expires: 2025-12-02]

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=M5xm
-----END PGP PUBLIC KEY BLOCK-----

Follow our journey

Check out our Aurora Autonomy blog for the latest news on our team, our technology, and our progress as we chart the course that will deliver self-driving technology to the world.