Secure Development

Secure Development

Security is embedded in our software and hardware development lifecycle at Yubico. Our engineering teams employ secure development practices that include security training, design reviews and threat modeling. Our dedicated security team provides automated static and dynamic analysis and performs a manual code review and security testing for major releases. We also work with trusted and independent third parties to review the security of our products and services.

Coordinated Vulnerability Disclosure

Yubico operates a Coordinated Vulnerability Disclosure process to handle vulnerability disclosures in a manner that protects the community while encouraging responsible reporting.

Security Advisories