Information on minimum security update periods

For details on the minimum security update period for your product please refer to the table below

Information on how to report security issues

Sony Interactive Entertainment supports both the PlayStation bug bounty program for certain PlayStation products and the Sony Global security program for all other Sony assets not covered by the PlayStation bug bounty program. Our global information security team is dedicated to protecting our assets, services, products, and customer information. We value the research community's contributions to our security and welcome collaboration.

 We accept reports of vulnerabilities that could compromise the integrity, availability, or confidentiality of our products, services, or IT infrastructure, provided they meet our submission guidelines (find out more in the links below).

PlayStation Products 

To find out which products are included in the PlayStation bug bounty program, please visit https://hackerone.com/playstation/policy_scopes. 

From here you can submit a vulnerability report directly using the button at the top of the page, or by following this link: https://hackerone.com/playstation. 

Sony Products

For all other Sony assets, please report it through Secure@Sony: https://secure.sony.com/ which includes a tab on submitting a vulnerability report. 

Timelines*

You will receive acknowledgement of a reported security issue within 5 business days and status updates will be provided until the resolution of a reported security issue within 30 business days**.