Report a Security Vulnerability

Security vulnerabilities relating to Wyze products are actively managed through a well-defined process. The time to respond varies based on the scope and priority of the issue. The process consists of 4 key steps:

1. Reporting: The process begins when the Wyze Cybersecurity team becomes aware of a potential security vulnerability in a Wyze product or service. The reporter receives an acknowledgement and updates throughout the handling process.

2. Evaluation: The Wyze Cybersecurity team confirms the potential vulnerability, assesses the risk, determines the impact and assigns a processing priority. If the vulnerability is confirmed, the priority determines how the issue is handled throughout the remaining steps in the process.

3. Solution: Working with the product team, the Wyze Cybersecurity team develops a solution that mitigates the reported security vulnerability. Solutions will take different forms based on the vulnerability. In cases where a vulnerability is being actively exploited, Wyze may deliver a temporary solution to contain the issue while working on the full solution

4. Communication: The Wyze Cybersecurity team publishes a security advisory for severe issues. Less severe issues are communicated through other methods.

---

If you have discovered a potential security vulnerability in Wyze products or services, please contact the Wyze Cybersecurity team at security@wyze.com.
A member of the Wyze Cybersecurity team will review your e-mail and contact you to collaborate on resolving the issue. It is important to include the following details:

• Detailed description of the vulnerability
• The products and versions affected
  • Device MAC Address (ID)
  • Account Email address
  • Time of the issue
  • Submitted Log ID from the mobile app

Vulnerability information is extremely sensitive so the Wyze Cybersecurity team strongly recommends that all security vulnerability reports be sent encrypted using the Wyze Cybersecurity team PGP key. Software to encrypt messages may be obtained from: GnuPG

PGP Public Keys
You may use the Wyze Cybersecurity Team public PGP key to encrypt email with sensitive information and to verify that security communications sent by Wyze are genuine.

Active Date: April 9, 2021
Expiration Date: April 7, 2029
Key ID: 0xF8A68F53
Key Type: RSA
Key Size: 4096/4096
Finger Print: B6C7 4B79 EE13 1B36 0B37 5B38 7FC3 D249 F8A6 8F53
User ID: security@wyze.com

You may copy-and-paste the key below.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: Keybase OpenPGP v2.0.76
Comment: https://keybase.io/crypto
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=TkQS
-----END PGP PUBLIC KEY BLOCK-----