Information

Vulnerability Reporting

How to report a vulnerability with a UK government online service.

Do you believe you have found a vulnerability with a UK government online service?

Please try to contact the owner first. If you cannot find a point of contact (or have had no response) then you can report the vulnerability to us.

Report the vulnerability

If the vulnerability relates to the Scottish Government, please report it here:

Report the gov.scot vulnerability

If you believe that you have spotted a vulnerability that is specifically on the NCSC web platform then you can report it below.

Report an NCSC website vulnerability

Vulnerability reporting guidelines

Please do not share the vulnerability information beyond the owner and us, without express consent from the owner
Vulnerabilities reported to the HackerOne platform can be submitted without the need to create a HackerOne account. However, if you wish to be updated you should create an account
To submit your report, you will need to agree to the HackerOne Terms and Conditions and acknowledge that you have read their Privacy Policy and Disclosure Guidelines
Once you have submitted the report, it will be assessed by our triage team within five working days, and forwarded to the affected owners as soon as possible
The affected owner holds responsibility for resolving the issue.

Also see

News 30 Mar 2026

Vulnerability affecting F5 BIG-IP APM

The NCSC is encouraging UK organisations to mitigate an unauthenticated remote code execution vulnerability affecting F5 BIG-IP Access Policy Manager.

News 25 Mar 2026

Vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway

UK organisations encouraged to take immediate action to mitigate two recently disclosed vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway.

News 25 Feb 2026

Exploitation of Cisco Catalyst SD-WAN

Agencies strongly encourage immediate investigation of potential compromise of Cisco Catalyst SD-WAN.

Advice & guidance

Find information for...

Popular topics

Other resources

Respond to a cyber attack

Affecting you or your family

Affecting your small business

Affecting your organisation

Find a product or service

In this section

Useful links

Education & skills

Find information for...

Education & academia resources

Industry & skill resources

News

In this section

Stay up to date

Vulnerability Reporting

Vulnerability reporting guidelines

Published

Reviewed

Written for

Was this article helpful?

Also see

Vulnerability affecting F5 BIG-IP APM

Vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway

Exploitation of Cisco Catalyst SD-WAN

Advice & guidance

Find information for...

Popular topics

Other resources

Respond to a cyber attack

Affecting you or your family

Affecting your small business

Affecting your organisation

Find a product or service

In this section

Useful links

Education & skills

Find information for...

Education & academia resources

Industry & skill resources

News

In this section

Stay up to date

Vulnerability Reporting

Vulnerability reporting guidelines

Share and print this article

Published

Publish date

Reviewed

Written for

Written for

Was this article helpful?

Also see

Publish date

Vulnerability affecting F5 BIG-IP APM

Publish date

Vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway

Publish date

Exploitation of Cisco Catalyst SD-WAN