BT’s security team is committed to protecting our customers, our company, and our brands, and we therefore welcome investigative work into security vulnerabilities, carried out by well-intentioned and ethical security researchers. If you believe that you have identified a security vulnerability, then your values clearly align with our own, and we encourage you to report this into BT. 

Raise a security vulnerability

If you discover an issue which you believe is an in-scope security vulnerability, as described in our terms and conditions, then please fill in the following form.

*
Please enter your name
*
Please enter your email address. Please enter a valid email address

Select classification

1000 characters left
Please enter required field

Select affected asset

1000 characters left
Please enter required field

Select severity

*

Please provide as much detail as possible to help us assess this vulnerability.

1000 characters left
Please provide as much detail as possible to help us assess this vulnerability.
*

What could an attacker achieve?

1000 characters left
Please enter details of impact.
1000 characters left
Please enter details of URLs
Please fill in all the required fields and try again.
You have recently submitted a form. If you need to submit again please refresh the page in 2 minutes.
Please fill in all the required fields and try again.

Your enquiry has been submitted. You will receive an acknowledgement from BT within 24 hours.

Submit another feedback

In response to your initial report, you will receive an acknowledgement from BT within 24 hours of your report being received.

  • The acknowledgment email will include a ticket reference number, which you can quote in any further communications with our security team.

  • We will aim to fix this issue within 90 days
Group of people

Hall of Fame

Where we show our appreciation for those who have previously reported a confirmed vulnerability to us.

Our Hall of Fame