Vulnerability Disclosure Programme
At Crown, we are committed to maintaining secure products, systems and services. If you discover a potential security vulnerability, we encourage you to report it to us.
Report a vulnerability
Please send vulnerability reports to: VulnerabilityDisclosure@crown.com
Required information:
- A description of the issue
- The affected product, system or service
- Steps to reproduce the issue
- Your contact information
Responsible disclosure
- Act in good faith
- Avoid disrupting services or accessing unnecessary data
- Give Crown reasonable time to investigate and address the issue before public disclosure
CRA compliance
This Vulnerability Disclosure Programme supports Crown's cybersecurity and vulnerability management obligations under the European Union Cyber Resilience Act (CRA).