Passenger takes the security of your data and our infrastructure very seriously. We are committed to providing an environment that is safe, secure, and available to all of our customers.

Responsible Vulnerability Disclosure

Our goal is to keep Passenger safe and secure for everyone. If you have discovered a security vulnerability we would greatly appreciate your help in disclosing it to us in a responsible manner. Publicly disclosing a vulnerability can put the entire Passenger ecosystem at risk.

If you have discovered a potential vulnerability we would greatly appreciate you informing our Security team. You can submit the details of the potential vulnerability by emailing us at [email protected]. If you would like to encrypt your message, you can find details about that lower down this page.

We will work with you to assess and understand the scope of the issue and fully address any concerns. Submitted vulnerabilities are initially reviewed, triaged, and then assessed in detail to determine the risk level of the vulnerability. Security vulnerabilities are treated with the utmost importance to ensure the safety and security of our service.

Encrypting Your Message

If you are sending sensitive information you can encrypt your communications to Passenger, or verify signed messages you receive from Passenger using the PGP key below:

  • Key ID: B831800C
  • Key type: RSA
  • Key size: 4096
  • User ID: [email protected]
  • Fingerprint: 417D F375 B6A4 3F56 BDB4 06F6 8EC6 0F5E B831 800C
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
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=kJ/V
-----END PGP PUBLIC KEY BLOCK-----