Vulnerability Reward Program

Submit a vulnerability report for related platforms, products and services of Alibaba Group

PRODUCTS AND SERVICES OF Alibaba Group

SUBMIT VULNERABILITY REPORT

In the interest of security, users agree to cooperate with Alibaba Group exclusively and not divulge the information to third-parties.

ABOUT ASRC

ASRC(Alibaba Security Response Center) is the point of contact of Alibaba security. We hope to strengthen cooperation and exchange security information with colleagues of the security industry, with the aim to create a healthier and more secure e-commerce industry ecosystem together. 

Our duties include strengthening Alibaba’s network and information security, protecting Alibaba and its customers from online security threats, handling security incidents and building cooperation or coordination networks with security teams inside and outside Alibaba. Our daily work include operating the Threat Bounty Program, building relationships with the bug hunters and security partners, holding security salons and conferences, monitoring and analyzing security threats and vulnerabilities of the products, helping developers to fix vulnerabilities and releasing alarms to all customers, helping our customers recover from security incidents quickly and effectively, tracing the source of attack accurately, etc. 

CONTACT US

If you have any questions or suggestions, please contact: security@service.alibaba.com
Following our Twitter for newest information: @AsrcSecurity