Terms of use

Using security information

Egret reports on security findings and links to the evidence behind them. Reporting may use AI assistance and can contain errors. Original-source discovery records are separate from reviewed Egret articles.

Before applying a fix or changing a system, check the original advisory, your installed version, and your environment. A reported severity score or exploitation status does not establish whether your own system is affected.

Sharing and attribution

When quoting or sharing Egret reporting, credit Egret and link to the relevant article. Retain credit for the original researchers and publishers.

For reuse of external advisories, research, or images, check the original publisher’s terms. Linking to outside material does not make it Egret’s work.

Public data and external links

The public API provides read-only access to published reports, source discovery, and tracked vulnerability records. Preserve the source links, dates, and stated limits when using that data.

External publishers control their own pages. Their content and availability can change independently of Egret.

Report a problem

If a report contains an error or misattributes your work, contact the desk with the page URL and supporting evidence.