Porsche expands its cybersecurity activities

Porsche is launching a bug bounty program in October to collaborate with external cybersecurity researchers to further improve the security of its digital products and services.

Comprehensive security measures

Porsche's bug bounty program complements the services offered by the global cybersecurity team and will be implemented by experts at the Porsche //DigitalFamily. The program relies on the creativity and collective intelligence of the global security community. Initiatives are advertised on established bug bounty platforms. If participants report an actual security vulnerability, they receive a financial reward.

Exclusion of Porsche employees

To ensure fairness and transparency, the company clarifies that its valued employees, suppliers and contractors with active supply orders are not eligible to participate in the program, thanking them for their understanding and continued support in making their systems safer for everyone.

Response times and disclosure policy

In general, Porsche respects the following response times: 1 working day from the submission of the report; 12 days for triage; 1 month for bug bounty approval. For more information on the program, you can visit the dedicated page.