Hero Banner image

Altera Product Security

Altera Product Security

Altera is committed to helping customers maintain secure computing environments. We promptly address security issues and share guidance through security advisories and notices. Security advisories provide fixes or mitigations for confirmed vulnerabilities in Altera® products.

Altera Security Advisories

The Altera Security Advisories page is regularly updated with the latest security information on Altera products. Visit the Altera Security Advisories page.

How to Report Potential Security Vulnerabilities

If you believe you’ve found a security vulnerability in an Altera product or solution, submit reports through the current Bug Bounty program provider, Intigriti, which is the preferred method. Our PSIRT engineers work directly with Intigriti to analyze your submission report. See the Intigriti page for the Altera Bug Bounty program terms and conditions.

To contact the Altera Product Security Incident Response Team (PSIRT) directly, email psirt@altera.com. Please encrypt all correspondence using our PGP public key. when sending information about potential security weaknesses or vulnerabilities.

Only submissions through Intigriti qualify for consideration for bug bounty rewards.

If you’re having trouble encrypting your vulnerability report or have questions about the process, please email PSIRT. We’ll help identify a secure method for transmitting your report. Please note that this email is for security-related issues that affect Altera Products. For general support inquiries, please use the regular support channels.

 

When reporting an issue via email, please provide as much of the following information as possible:
Affected Products and Version
<List of products potentially impacted including those already shipping and those in development. Please Include versions and download links if possible>
Description
<Full description of the issue including any impacts to confidentiality, integrity, or availability.>
Steps to Replicate/Proof of Concept (POC)
<Steps to reproduce the issue should be included and/or any code to trigger the vulnerability>
Known Disclosure Plans
<Any known disclosure plans>

PGP Key

The public PGP key for psirt@altera.com can be downloaded here.

Fingerprint: 97B8051032EDFB48F017134185385B2B387B5E05.
Expiration Date: 10/28/2028