NARA is committed to providing a secure environment to safeguard our mission to drive openness, cultivate public participation, and strengthen our nation’s democracy through public access to high-value Government records. NARA's Vulnerability Disclosure Policy gives security researchers guidelines for conducting vulnerability discovery activities and submitting vulnerability reports. We will use any information you submit under this policy for defensive purposes only -- to mitigate or remediate vulnerabilities.
If you prefer to remain anonymous, you may submit vulnerability disclosure information through this report (without filling in the contact fields).
When you submit a report, we encourage you to: