Anthropic00:00PolicyOfficial Docs
Anthropic updates vulnerability disclosure policy
Turn AI-found vulns into safer, predictable disclosure workflows.
Key Points
- 1Targets ~90-day public disclosure timeline
- 2Prioritizes early notice for defenders and patches
- 3Emphasizes human-reviewed reports
- 4Applies to authorized research scope
Anthropic updated its coordinated disclosure policy for vulnerabilities discovered by Claude. It clarifies process and timelines, generally aiming for public disclosure around 90 days. As AI speeds up vulnerability discovery, this helps teams standardize responsible handling. Scope and authorization expectations are also specified.