General information about security at Mozilla is available at https://www.mozilla.org/en-US/security/.

Please report Firefox bugs in our Bugzilla instance by using our bug bounty form. Be aware that your e-mail address will be made public. See our Bugzilla etiquette for more.

We have two:

• Firefox browsers fall under the Firefox bug bounty program which is handled on Bugzilla.
• The general Mozilla Security Bug Bounty Program also covers other products and services and is on HackerOne.

Questions regarding security bugs or our bounty programs can be directed to security@mozilla.com. An encryption key for sending GPG encrypted mails is also available.

We publish Firefox security advisories for all released versions of Firefox Desktop. For other products including Firefox for iOS and Android please refer to the overview.