# Security Policy

Please refer to the [Bytecode Alliance security
policy](https://bytecodealliance.org/security) for details on our disclosure policy and how to receive
notifications about security issues.

For classification of what is and what isn't a security issue please see our
[online
documentation](https://docs.wasmtime.dev/security-what-is-considered-a-security-vulnerability.html)
on the subject.

## Reporting a Vulnerability

To report a vulnerability, navigate to the [security](https://github.com/bytecodealliance/wasmtime/security) 
tab and click the green `Report a Vulnerability` button, or use 
[this direct link](https://github.com/bytecodealliance/wasmtime/security/advisories/new) to the reporting form.