Security

Security

Coordinated Vulnerability Disclosure

Aurora is committed to protecting the security and privacy of its business data, employee data, and most importantly, its customer data.

We don’t authorize penetration testing of our systems. However, if you believe you’ve discovered a security vulnerability in any of our products, services, or websites that could impact the confidentiality, integrity, or availability of Aurora’s systems or data, please contact security@aurora.tech with the following information:

  • The name of the product or the address of the service or website
  • The vulnerability class (cross-site scripting, improper authentication, path traversal, etc.)
  • Detailed instructions that allow us to reproduce your finding, including screenshots, videos, and code as needed
  • An attack scenario that explains how an attacker could exploit this vulnerability and what it would allow the attacker to do

If you wish, you may use the PGP key below to encrypt your emails.

We aim to respond to reported vulnerabilities within one business day to acknowledge receipt of your report. We will work with you in a coordinated fashion to share our timeframe to mitigate the vulnerability, and to notify you once the vulnerability has been mitigated.

We do not currently offer bug bounties.


pub rsa4096 2021-02-02 [SCE] [expires: 2025-02-01]
649B98BA079A38C980E3FD75C50A8463607E0130
uid Aurora Innovation Security <security@aurora.tech>

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=KRM1
-----END PGP PUBLIC KEY BLOCK-----

Be part of a team you’re proud of

Our values are more than lip service. They define who we are, set the tone for how we work as a team, and guide us through important decisions. At Aurora, we operate with integrity, set outrageous goals, and continue to build a culture where we win together—all without any jerks.