security.html.erb

---
layout: "inner"
page_title: "Security"
description: |-
  Terraform takes security very seriously. Please responsibly disclose any security vulnerabilities found and we'll handle it quickly.
---

<h1>Terraform Security</h1>

<p>
  We understand that many users place a high level of trust in HashiCorp
  and the tools we build. We apply best practices and focus on security to
  make sure we can maintain the trust of the community.
</p>

<p>
  We deeply appreciate any effort to disclose vulnerabilities responsibly.
</p>

<p>
  If you would like to report a vulnerability, please see the <a
  href="https://www.hashicorp.com/security.html">HashiCorp security
  page</a>, which has the proper email to communicate with as well as our
  PGP key. Please <strong>do not create an GitHub issue for security
  concerns</strong>.
</p>

<p>
  If you need to report a non-security related bug, please open and issue
  on the <a href="https://github.com/hashicorp/terraform">Terraform
  GitHub repository</a>.
</p>