2017-03-18 22:31:12 -04:00
---
layout: default
title: Security
permalink: /security/
redirect_from:
- /en/security/
- /en/doc/security/
- /en/doc/qubes-security/
- /doc/QubesSecurity/
- /wiki/QubesSecurity/
- /en/doc/security-page/
- /doc/SecurityPage/
- /wiki/SecurityPage/
- /trac/wiki/SecurityPage/
---
Qubes OS Project Security Center
================================
2018-01-31 23:40:01 -05:00
- [Security FAQ]
- [Security Goals]
- [Security Pack]
- [Security Bulletins]
- [Canaries]
- [Xen Security Advisory (XSA) Tracker]
- [Why and How to Verify Signatures]
- [PGP Keys]
2017-03-18 22:31:12 -04:00
Reporting Security Issues in Qubes OS
-------------------------------------
2017-04-17 20:18:46 -04:00
If you believe you have found a security issue affecting Qubes OS, either directly or indirectly (e.g. the issue affects Xen in a configuration that is used in Qubes OS), then we would be more than happy to hear from you!
2018-01-31 23:40:01 -05:00
We promise to treat any reported issue seriously and, if the investigation confirms that it affects Qubes, to patch it within a reasonable time and release a public [Qubes Security Bulletin][Security Bulletins] that describes the issue, discusses the potential impact of the vulnerability, references applicable patches or workarounds, and credits the discoverer.
2017-03-18 22:31:12 -04:00
The Qubes Security Team
-----------------------
2018-01-31 23:40:01 -05:00
The Qubes Security Team can be contacted via email at the following address:
security at qubes-os dot org
2017-03-18 22:31:12 -04:00
2018-01-31 23:40:01 -05:00
### Security Team PGP Key ###
2017-03-18 22:31:12 -04:00
2018-01-31 23:40:01 -05:00
Please use the [Security Team PGP Key] to encrypt all emails sent to this address.
This key is signed by the [Qubes Master Signing Key].
Please see [Why and How to Verify Signatures] for information about how to verify these keys.
2017-03-18 22:31:12 -04:00
### Members of the Security Team ###
2018-01-31 23:40:01 -05:00
- [Joanna Rutkowska]
- [Marek Marczykowski-Górecki]
[Security FAQ]: /faq/#general--security
[Security Goals]: /security/goals/
[Security Pack]: /security/pack/
[Security Bulletins]: /security/bulletins/
[Canaries]: /security/canaries/
[Xen Security Advisory (XSA) Tracker]: /security/xsa/
[Why and How to Verify Signatures]: /security/verifying-signatures/
[PGP Keys]: https://keys.qubes-os.org/keys/
[Security Team PGP Key]: https://keys.qubes-os.org/keys/qubes-os-security-team-key.asc
[Qubes Master Signing Key]: https://keys.qubes-os.org/keys/qubes-master-signing-key.asc
[Joanna Rutkowska]: /team/#joanna-rutkowska
[Marek Marczykowski-Górecki]: /team/#marek-marczykowski-górecki
