Anaconda is the trusted platform accelerating enterprise AI with governed open-source Python. We serve millions of users globally—from individual developers to Fortune 500 companies—powering AI/ML model development, data science workflows, and intelligent applications. Our platform provides pre-vetted Python packages, automated security scanning, and enterprise governance that helps organizations move from AI prototype to production faster, safer, and smarter. What do we do? We provide enterprise-ready AI development tools and trusted Python package management solutions. Anaconda Core delivers secure, validated open-source packages with intelligent dependency resolution. Anaconda AI Catalyst enables rapid deployment of pre-validated, optimized AI models with built-in governance. Our platform helps organizations scale AI initiatives while maintaining security and compliance standards. Intention for this program To collaborate with the community in identifying and addressing security vulnerabilities across Anaconda's infrastructure, products, and services. Your responsible disclosure helps us maintain the trust of millions of users who rely on our platform to advance their AI initiatives.
This is a responsible disclosure program without bounties.
Introduction
Thank you for your interest in helping secure Anaconda's platform. This vulnerability disclosure program covers all Anaconda-owned web properties, infrastructure, applications, and installers. We welcome reports of critical and high security vulnerabilities that could impact our users or infrastructure.
Feedback
Would you like to help us improve our program or have some feedback to share, please send your anonymous feedback here:
Program feedback link
Please note this form will be checked periodically and should not be used for submission or support queries.
We will try our best to forward any non-Anaconda product vulnerabilities to the relevant owners.
This program follows Intigriti's triage standards based on the proof of concept.
You can self-register on applicable Anaconda applications.
No, this is a vulnerability disclosure program. We do not offer financial rewards for vulnerability reports at this time. We value responsible disclosure and will acknowledge your contributions to improving our security.
For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.
It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.
