Vulnerability Reporting

By submitting a report under this program, you agree not to:

• Engage in testing or research that may harm or put at risk Boston Dynamics, its employees, its customers, or other third party individuals or entities.
• Disrupt, compromise, or harm any Boston Dynamics product or data other than that which you own, and in accordance with its terms of use and your agreements with Boston Dynamics.
• Access or disclose personal information belonging to Boston Dynamics, its employees, its customers, or other third party individuals or entities.
• Compromise or disclose confidential or proprietary data belonging to Boston Dynamics, its employees, its customers, or other third party individuals or entities.
• Test the physical security of any Boston Dynamics property or facility, or the properties or facilities of Boston Dynamics affiliates or related third parties.
• Perform any kind of denial-of-service testing or over-exhaust an IT function.
• Perform social engineering, spam, or phishing/spear phishing attacks.
• Disclose to any third party the details of any submitted vulnerability reports before Boston Dynamics can confirm complete remediation of the identified issue (if any).
• Participate or submit reports if you are employed by Boston Dynamics, or an affiliate company, or a Boston Dynamics supplier, or are acting on behalf of someone employed by Boston Dynamics. If you are a member of any of these entities, please report the issue to your management, who is then to report to Boston Dynamics, directly.