Report a Security Vulnerability

Our Policy

GEICO encourages researchers to share with our team the details of any suspected vulnerability by submitting the form below. By clicking "Report Vulnerability", you acknowledge you have read, understand, and agree to the guidelines described in this policy for the conduct of security research and disclosure of potential vulnerabilities. GEICO will not take legal action against individuals who discover, and report vulnerabilities provided they adhere to these guidelines.

Any information you receive or collect about GEICO, its clients, or their employees during the discovery of a suspected vulnerability must be kept confidential and only used in connection with the Responsible Disclosure Policy. You may not use, disclose, or distribute any such confidential information, including, but not limited to, information regarding your submission and information you obtain when researching GEICO sites, without prior written consent from GEICO.