[\/vc_column_text][vc_column_text css=\u00bb.vc_custom_1668155545215{margin-top: 1.5rem !important;margin-bottom: 1.5rem !important;}\u00bb]Nextcloud is designed to offer the best security in the on-premises content collaboration industry. Read more about the security features and our development process.[\/vc_column_text][vc_btn title=\u00bbMore about security\u00bb link=\u00bburl:%2Fsecure%2F|title:More%20about%20security\u00bb el_class=\u00bbbtn-main\u00bb][\/vc_column][vc_column width=\u00bb1\/2″][vc_row_inner gap=\u00bb15″ el_class=\u00bbcompliant_iconboxes\u00bb][vc_column_inner]

$\"server\"$ <\/div>\n\t

Server owners<\/h4>
For server owners, our documentation has a section with best practices and tips on securing a Nextcloud server.<\/div>Ver m\u00e1s
Report
\na security issue<\/h2>\n
[\/vc_column_text][vc_separator color=\u00bbcustom\u00bb border_width=\u00bb2″ el_width=\u00bb20″ accent_color=\u00bb#0082c9″ el_class=\u00bbnc_separator_line\u00bb][vc_column_text css=\u00bb.vc_custom_1667986091963{margin-bottom: 2rem !important;}\u00bb]<\/p>\n
If you have discovered a security issue with Nextcloud, please read our responsible
\ndisclosure guidelines and contact us at\u00a0 hackerone.com\/nextcloud<\/strong><\/a>.
\nYour report should include:[\/vc_column_text][vc_row_inner gap=\u00bb25″ el_class=\u00bbiconboxes\u00bb][vc_column_inner el_class=\u00bbiconbox\u00bb width=\u00bb1\/3″][vc_icon icon_fontawesome=\u00bbfas fa-hashtag\u00bb color=\u00bbcustom\u00bb align=\u00bbcenter\u00bb custom_color=\u00bb#0082c9″][vc_column_text el_class=\u00bbiconbox_title\u00bb]<\/p>\n
Product version<\/h4>\n
[\/vc_column_text][\/vc_column_inner][vc_column_inner el_class=\u00bbiconbox\u00bb width=\u00bb1\/3″][vc_icon icon_fontawesome=\u00bbfas fa-align-left\u00bb color=\u00bbcustom\u00bb align=\u00bbcenter\u00bb custom_color=\u00bb#0082c9″][vc_column_text el_class=\u00bbiconbox_title\u00bb]<\/p>\n
A\u00a0vulnerability description<\/h4>\n
[\/vc_column_text][\/vc_column_inner][vc_column_inner el_class=\u00bbiconbox\u00bb width=\u00bb1\/3″][vc_icon icon_fontawesome=\u00bbfas fa-list-ol\u00bb color=\u00bbcustom\u00bb align=\u00bbcenter\u00bb custom_color=\u00bb#0082c9″][vc_column_text el_class=\u00bbiconbox_title\u00bb]<\/p>\n
Reproduction steps<\/h4>\n
[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css=\u00bb.vc_custom_1667985711800{margin-top: 3rem !important;}\u00bb][vc_column][vc_column_text]<\/p>\n
What happens next<\/h3>\n
[\/vc_column_text][vc_row_inner equal_height=\u00bbyes\u00bb gap=\u00bb20″ el_class=\u00bbiconboxes\u00bb css=\u00bb.vc_custom_1667986169446{margin-top: 2rem !important;}\u00bb][vc_column_inner el_class=\u00bbiconbox\u00bb width=\u00bb1\/4″][vc_icon use_svg=\u00bbyes\u00bb icon_fontawesome=\u00bb\u00bb color=\u00bbcustom\u00bb css=\u00bb\u00bb custom_color=\u00bb#0082c9″ svg_id=\u00bb342712″][vc_column_text]A member of the security team will confirm the vulnerability, determine its impact, and develop a fix.[\/vc_column_text][\/vc_column_inner][vc_column_inner el_class=\u00bbiconbox\u00bb width=\u00bb1\/4″][vc_icon use_svg=\u00bbyes\u00bb icon_fontawesome=\u00bb\u00bb color=\u00bbcustom\u00bb css=\u00bb\u00bb custom_color=\u00bb#0082c9″ svg_id=\u00bb344939″][vc_column_text]The fix will be applied to the master branch, tested, and packaged in the next security release.[\/vc_column_text][\/vc_column_inner][vc_column_inner el_class=\u00bbiconbox\u00bb width=\u00bb1\/4″][vc_icon use_svg=\u00bbyes\u00bb icon_fontawesome=\u00bb\u00bb color=\u00bbcustom\u00bb css=\u00bb\u00bb custom_color=\u00bb#0082c9″ svg_id=\u00bb346435″][vc_column_text]The vulnerability will be publicly announced after the release.[\/vc_column_text][\/vc_column_inner][vc_column_inner el_class=\u00bbiconbox\u00bb width=\u00bb1\/4″][vc_icon use_svg=\u00bbyes\u00bb icon_fontawesome=\u00bb\u00bb color=\u00bbcustom\u00bb css=\u00bb\u00bb custom_color=\u00bb#0082c9″ svg_id=\u00bb346443″][vc_column_text]Finally, your name will be added to the\u00a0 hall of fame<\/a> as a thank you from the entire Nextcloud community.[\/vc_column_text][\/vc_column_inner][vc_column_inner][vc_column_text css=\u00bb.vc_custom_1667986173450{margin-top: 2rem !important;}\u00bb]<\/p>\n
Read our threat model<\/a>\u00a0to know what is expected behavior.<\/p>\n
[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][\/vc_section][vc_section el_class=\u00bbnc_default_section lightBG\u00bb css=\u00bb.vc_custom_1667810946782{padding-top: 3rem !important;padding-bottom: 3rem !important;}\u00bb][vc_row content_placement=\u00bbmiddle\u00bb][vc_column][vc_column_text]<\/p>\n
PGP Key for Submissions<\/h2>\n
[\/vc_column_text][vc_separator color=\u00bbcustom\u00bb border_width=\u00bb2″ el_width=\u00bb20″ accent_color=\u00bb#0082c9″ el_class=\u00bbnc_separator_line\u00bb][vc_column_text]<\/p>\n
In order to facilitate secure submission of security issues,
\nwe provide the following\u00a0 PGP key<\/a>\u00a0for confidential submission:[\/vc_column_text][\/vc_column][\/vc_row][vc_row gap=\u00bb20″ equal_height=\u00bbyes\u00bb content_placement=\u00bbmiddle\u00bb el_class=\u00bbiconboxes\u00bb][vc_column width=\u00bb1\/4″][\/vc_column][vc_column width=\u00bb1\/4″ el_class=\u00bbiconbox\u00bb][vc_icon use_svg=\u00bbyes\u00bb icon_fontawesome=\u00bb\u00bb color=\u00bbcustom\u00bb css=\u00bb\u00bb custom_color=\u00bb#0082c9″ svg_id=\u00bb346455″][vc_column_text el_class=\u00bbiconbox_title\u00bb]<\/p>\n
Key ID<\/h4>\n
[\/vc_column_text][vc_column_text]`A724937A<\/code>[\/vc_column_text][\/vc_column][vc_column width=\u00bb1\/4″ el_class=\u00bbiconbox\u00bb][vc_icon use_svg=\u00bbyes\u00bb icon_fontawesome=\u00bb\u00bb color=\u00bbcustom\u00bb css=\u00bb\u00bb custom_color=\u00bb#0082c9″ svg_id=\u00bb346450″][vc_column_text el_class=\u00bbiconbox_title\u00bb]<\/p>\n`
Fingerprint<\/h4>\n[\/vc_column_text][vc_column_text]2880 6A87 8AE4 23A2 8372 792E D758 99B9 A724 937A<\/code>[\/vc_column_text][\/vc_column][vc_column width=\u00bb1\/4″][\/vc_column][vc_column][vc_column_text]<\/p>\n We do however recommend to not encrypt the information submitted \nvia HackerOne as only a small subset of the team has access to this key.[\/vc_column_text][\/vc_column][\/vc_row][\/vc_section][vc_section el_class=\u00bbnc_default_section\u00bb css=\u00bb.vc_custom_1667810243936{padding-top: 3rem !important;padding-bottom: 3rem !important;}\u00bb][vc_row content_placement=\u00bbmiddle\u00bb][vc_column width=\u00bb1\/2″][vc_column_text el_class=\u00bbnc_text_as_separator centerMobile\u00bb]Guidelines[\/vc_column_text][vc_column_text el_class=\u00bbnc-section-title\u00bb]<\/p>\n Responsible disclosure \nguidelines<\/h2>\n[\/vc_column_text][vc_column_text css=\u00bb.vc_custom_1667980771923{margin-top: 2rem !important;margin-bottom: 2rem !important;}\u00bb]The Nextcloud community kindly requests that you comply with the following guidelines when researching and reporting security vulnerabilities:[\/vc_column_text][\/vc_column][vc_column width=\u00bb1\/2″][vc_column_text]<\/p>\n \nOnly test for vulnerabilities on your own install of Nextcloud Server<\/li>\n Confirm the vulnerability applies to a supported product version<\/li>\n Share vulnerabilities in\u00a0detail\u00a0only with the security team<\/li>\n Allow reasonable time for a response from the security team<\/li>\n Do not publish information related to the vulnerability until Nextcloud has made an announcement to the community<\/li>\n<\/ul>\n[\/vc_column_text][\/vc_column][\/vc_row][\/vc_section][vc_section el_class=\u00bbcta-contact nc-section-gradient-bg white-text\u00bb css=\u00bb.vc_custom_1663589051447{padding-top: 3rem !important;padding-bottom: 3rem !important;}\u00bb][vc_row content_placement=\u00bbmiddle\u00bb][vc_column width=\u00bb1\/6″ el_class=\u00bbtext-right\u00bb][\/vc_column][vc_column width=\u00bb2\/3″][vc_column_text css=\u00bb\u00bb el_class=\u00bbnc-section-title\u00bb]<\/p>\n \n\nGet started now<\/h2>\n<\/div>\n<\/div>\n[\/vc_column_text][vc_column_text css=\u00bb.vc_custom_1775738207249{margin-bottom: 0px !important;}\u00bb]<\/p>\n Reduce compliance risks, improve internal collaboration and reduce \noperational expenses with the leading content collaboration platform. \nContact us now to learn how Nextcloud can help you!<\/p>\n [\/vc_column_text] [vc_row][vc_column el_class=\u00bbbtns-inline-centered\u00bb css=\u00bb.vc_custom_1774532949121{margin-top: 1rem !important;}\u00bb][vc_btn use_svg_icon=\u00bbyes\u00bb title=\u00bbGet a quote\u00bb i_icon_fontawesome=\u00bb\u00bb css=\u00bb\u00bb add_icon=\u00bbtrue\u00bb el_class=\u00bbbtn-white\u00bb link=\u00bburl:%2Fget-a-quote%2F|title:Get%20a%20quote\u00bb svg_icon_id=\u00bb342845″][vc_btn use_svg_icon=\u00bbyes\u00bb title=\u00bbCall us: +49 711 25 24 28 90″ i_icon_fontawesome=\u00bb\u00bb css=\u00bb\u00bb link_id=\u00bbphone_call_cta\u00bb add_icon=\u00bbtrue\u00bb el_class=\u00bbbtn-white-outline mobile-only-btn\u00bb link=\u00bburl:tel%3A%20%2B49%20711%2025%2024%2028%2090|title:Call%20us%3A%20%2B49%20711%2025%2024%2028%2090″ svg_icon_id=\u00bb342801″][\/vc_column][\/vc_row]<\/p>\n<\/div>

Reproduction steps<\/h4>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css=\u00bb.vc_custom_1667985711800{margin-top: 3rem !important;}\u00bb][vc_column][vc_column_text]<\/p>\n

Reproduction steps<\/h4>\n
[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css=\u00bb.vc_custom_1667985711800{margin-top: 3rem !important;}\u00bb][vc_column][vc_column_text]<\/p>\n