How do I subscribe to FusionAuth security advisory notifications?
-
How do we properly subscribe to receive security advisories and critical vulnerability notifications directly?
Is there a security mailing list, an account setting, or a specific role assignment we need to configure to ensure we don't miss security disclosures?
-
Security notices are sent to users in your account.fusionauth.io portal who have been designated as a "Security Officer".
To ensure your team receives security advisories:
- Log into account.fusionauth.io
- Assign the Security Officer role to anyone on your team who should receive security notifications
- There is no limit to the number of users you can assign this role to
This is documented in the FusionAuth security documentation.
By assigning this role to appropriate team members, you'll ensure that critical security advisories are delivered directly to your organization rather than relying on personal accounts.
-
D dan has marked this topic as solved