Vera Vulnerability Disclosure

generated: '2026-07-21'
method: searched
probe: false
attribution: parent-company
note: 'Vera is fully absorbed into Fortra (acquired by HelpSystems Dec 2020, product
  now Digital Guardian Secure Collaboration), so the applicable vulnerability
  disclosure program is Fortra''s. Fortra publishes a Vulnerability Disclosure
  Policy Statement, a Report a Vulnerability page, and product security advisories,
  and has been a CVE Numbering Authority (CNA) since December 2023. www.fortra.com
  returns HTTP 403 to automated probes (WAF), so pages were verified via web
  search, not fetched raw.'
policy:
- https://www.fortra.com/security/policy
report:
- https://www.fortra.com/security/report
advisories:
- https://www.fortra.com/security/advisories/product-security
cna: true
evidence:
- source: https://www.fortra.com/security/policy
  kind: vulnerability-disclosure-policy
  title: Vulnerability Disclosure Policy Statement | Fortra
- source: https://www.fortra.com/security/report
  kind: report-a-vulnerability
  title: Report a Vulnerability | Fortra Security and Trust Center
- source: https://www.fortra.com/security/advisories/product-security
  kind: security-advisories
  title: Product Security Advisories | Fortra