Security Advisories and Disclosures

Learn why Netskope debuted as a leader in the 2024 Gartner® Magic Quadrant™️ for Single-Vendor Secure Access Service Edge

Get the report

Read how innovative customers are successfully navigating today’s changing networking & security landscape through the Netskope One platform.

Get the eBook

Learn about Netskope Partners

Group of diverse young professionals smiling

Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Firewall, Next Generation Secure Web Gateway (SWG), and Private Access for ZTNA built natively into a single solution to help every business on its journey to Secure Access Service Edge (SASE) architecture.

Go to Products Overview

Netskope Next Gen SASE Branch converges Context-Aware SASE Fabric, Zero-Trust Hybrid Security, and SkopeAI-powered Cloud Orchestrator into a unified cloud offering, ushering in a fully modernized branch experience for the borderless enterprise.

Learn about Next Gen SASE Branch

Get your complimentary copy of the only guide to SASE design you’ll ever need.

Get the eBook

Learn about NewEdge

Lighted highway through mountainside switchbacks

Learn how we secure generative AI use

Learn about Zero Trust

Choose Netskope GovCloud to accelerate your agency’s transformation.

Learn about Netskope GovCloud

2025 Predictions
In this episode of Security Visionaries, we're joined by Kiersten Todt, President at Wondros and former Chief of Staff for the Cybersecurity and Infrastructure Security Agency (CISA) to discuss predictions for 2025 and beyond.

Play the podcast Browse all podcasts

Read how Netskope can enable the Zero Trust and SASE journey through secure access service edge (SASE) capabilities.

Read the blog

Learn how to navigate the latest advancements in SASE and zero trust and explore how these frameworks are adapting to address cybersecurity and infrastructure challenges

Explore sessions

Learn about the future convergence of networking and security tools in today’s cloud dominant business model.

Learn about SASE

Netskope is proud to participate in Vision 2045: an initiative aimed to raise awareness on private industry’s role in sustainability.

Find out more

Supporting Sustainability Through Data Security

At Netskope, founders and leaders work shoulder-to-shoulder with their colleagues, even the most renowned experts check their egos at the door, and the best ideas win.

Join the team

Go to Customer Solutions

Learn about Training and Certifications

Netskope PSIRT

Advisories and Disclosures

Report a security vulnerability

Vulnerability Disclosure Policy

Netskope Product Security Incident Response Team (PSIRT)

Netskope PSIRT is the centralized process through which Netskope customers, security researchers, industry groups, government organizations, or vendors report potential Netskope security vulnerabilities.

The Netskope team manages the receipt, investigation and internal coordination of security vulnerability information related to all Netskope products, offerings and websites. This team then coordinates with each individual Netskope product and solution team to investigate, and if needed, identify the appropriate response plan. Maintaining communication between all involved parties, both internal and external, is a key component of Netskope’s vulnerability response process.

Advisories and Disclosures

We strongly believe in responsible and coordinated disclosures of vulnerabilities that may affect the services we provide. Public disclosure of vulnerabilities is an essential part of the vulnerability disclosure process and is one of the many paths that lead to making software better and enables learnings that makes the security community better.

Security Advisory ID	Severity Rating	Fix Version	Fix Description
NSKPSA-2024-001	High	N/A	Netskope client enrollment bypass issue
NSKPSA-2023-003	Medium	Release101	Netskope NSClient is impacted by local privilege escalation vulnerability to terminate the NSClient
NSKPSA-2023-002	High	Release 100	Local privilege escalation using log files in Netskope Client
NSKPSA-2023-001	High	Release 100	Local privilege escalation vulnerability in Netskope Client
NSKPSA-2022-001	High	Release 92	Sensitive information stored in NSClient logs
NSKPSA-2021-002	High	Release 89	Local privilege escalation vulnerability in Netskope Client on macOS
NSKPSA2020-005	Critical	Release 81	Netskope Client Stack Buffer Overflow
NSKPSA2020-004	Critical	Release 81	Netskope Client Stack Buffer Overflow
NSKPSA2020-002	High	Release 79	Netskope Admin UI CSV Injection
NSKPSA2020-001	High	Release 78	Fix for Privilege Escalation Vulnerability Discovered in Netskope Windows Client

Report a security vulnerability

We appreciate your partnership and value your decision to make us one of your trusted security partners. We believe a partnership is centered on working together, delivering transparency and commitment to making it better. If you have questions or concerns please contact your Technical Success Manager or write to Netskope Product Security Incident Response Team, [email protected].

Customers

Third party researchers

Customers

Customers and other entitled users should report any potential security vulnerabilities they may discover in Netskope products or offerings via normal Netskope Technical Support processes.

Go to Technical Support

Third party researchers

Third party researchers and other security entities can report potential security vulnerabilities in Netskope products, offerings, or websites.

Vulnerability Disclosure Policy

At Netskope, we take our responsibility to protect our users’ information and the services we provide to them very seriously.

Linked below is our Vulnerability Disclosure Policy. The Vulnerability Disclosure Policy describes what systems and types of research are covered under this policy, how to send us vulnerability reports, and how long we ask security researchers to wait before publicly disclosing vulnerabilities.

Vulnerability Disclosure Policy