IBM

Comment les joindre

IBM PSIRT · Email address

psirt@us.ibm.com

Contact à accès limité · 2026-09-22

Qui peut l’utiliser: users-meeting-published-eligibility

Restrictions: 'Potential security and AI vulnerabilities in IBM products and websites.' AI vulnerabilities explicitly in scope. PGP available.

Preuve que ce moyen accepte les prises de contact · 2026-09-22

'Potential security and AI vulnerabilities in IBM products and websites.' AI vulnerabilities explicitly in scope. PGP available.

One of only a handful of PSIRTs to name AI vulnerabilities in its remit.

IBM on HackerOne · Responsible disclosure programme

https://hackerone.com/ibm?type=team

Contact à accès limité · 2026-09-22

Qui peut l’utiliser: users-meeting-published-eligibility

Restrictions: Third-party researcher submissions.

Preuve que ce moyen accepte les prises de contact · 2026-09-22

Third-party researcher submissions.

IBM Safe Harbor Policy · Responsible disclosure programme

https://www.ibm.com/trust/security-psirt

Contact à accès limité · 2026-09-22

Qui peut l’utiliser: users-meeting-published-eligibility

Restrictions: The PSIRT page states vulnerability reporting is 'protected by IBM Safe Harbor Policy', available as a downloadable document.

Preuve que ce moyen accepte les prises de contact · 2026-09-22

The PSIRT page states vulnerability reporting is 'protected by IBM Safe Harbor Policy', available as a downloadable document.

The full text is in a linked PDF rather than inline; read it before testing. Anonymous form submission is also offered.

Homepage · Homepage

https://www.ibm.com/trust

Vérification expirée

Preuve que ce moyen accepte les prises de contact

Responsible Technology / AI ethics principles (no frontier safety framework published) · Published policy or framework

https://www.ibm.com/impact/ai-ethics

Vérification expirée

Preuve que ce moyen accepte les prises de contact

Ce qu'il fait

AI Ethics Board plus a Responsible Technology function governing watsonx and Granite models; PSIRT handles security and, unusually, explicitly names AI vulnerabilities in scope.

Évaluation franche

No public accounts found of AI-specific reports to IBM PSIRT. IBM's AI Ethics Board is well-documented in its governance publications but is an internal review body with no published external intake. The PSIRT route is professional and long-established; whether a pure model-behaviour finding survives triage there is untested in public.

Notes

psirt@us.ibm.com is the route, and you can cite that AI vulnerabilities are in its published scope. There is no channel to the AI Ethics Board. IBM is one of the few here offering both anonymous submission and a written safe harbour policy.

Comment les joindre

Ce qu'il fait

Évaluation franche

Notes

Sources