Vulnerability Disclosure Programme

At Crown, we are committed to maintaining secure products, systems and services. If you discover a potential security vulnerability, we encourage you to report it to us.

Report a vulnerability

Please send vulnerability reports to: VulnerabilityDisclosure@crown.com

Required information:

  • A description of the issue
  • The affected product, system or service
  • Steps to reproduce the issue
  • Your contact information

Responsible disclosure

  • Act in good faith
  • Avoid disrupting services or accessing unnecessary data
  • Give Crown reasonable time to investigate and address the issue before public disclosure

CRA compliance

This Vulnerability Disclosure Programme supports Crown's cybersecurity and vulnerability management obligations under the European Union Cyber Resilience Act (CRA).

Contact

VulnerabilityDisclosure@crown.com