Response and resolution timelines vary depending on the size of the security team and the volume of reports they are receiving. Some programs explicitly state their expected response and resolution times, so make sure you read the Security Page closely. If that information isn’t available, it is common to wait up to 7 days to get a first response to your report, and up to 60 days for a resolution, depending upon the complexity and severity of the issue reported. New programs are often flooded with high volumes upon launch, and frequently take up to 14 days for a first response. Smaller programs, with fewer people on their teams, can also take longer before they can get to your report.
Have more questions? Submit a request