ProtonBlog(new window)

At Proton, security is our highest priority and something that we work on day and night to improve. We have been very fortunate to have several individuals and organizations step forward to assist us with security auditing. The contributors listed below have dedicated their time and effort to helping us and participating in our Bug Bounty program(new window) because they believe in online privacy and the right to anonymous email.

If you would like to help audit the Proton Mail code, please reach out and let us know! And if we forgot to mention you below, let us know and we will add you right away, we actually don’t know who some of you are because Proton Mail users are anonymous.


Cyberkov(new window) – Cyberkov is a professional IT security services and consultation firm that provides a highly targeted set of security services, including but not limited to: Penetration Testing, Vulnerability Assessments, Security Assessments, Digital Forensics, Incident Response, Source Code Analysis, and Security Awareness Training. [Audit performed, May 2014, April 2016]

Hermes Security Solutions(new window) – Hermes Security Solutions is an offensive cybersecurity company based on hybrid pentesting. Our team, augmented by artificial intelligence, runs controlled attacks against the critical infrastructures of consolidated SMEs, Big Tech corporations, and government entities.


M.R.Vignesh Kumar (new window)(ம.ரா.விக்னேஷ் குமார்) – Security Researcher, தமிழ்நாடு

Brian Browning

Mike Cardwell

Thomas Roth – Security Researcher

Matthew R Price

Camilo Galdos AkA Dedalo(new window)

Stanislav Eremin(new window)

Eric Rafaloff(new window)

Adam Andersen(new window)

Ivan Krasin(new window) – Google Inc

Maxim Rupp(new window) –

Mar Adrian Belen(new window)

Mazin Ahmed(new window) [Audit performed, July 2014]

Prakhar Prasad(new window)

Osanda Malith Jayathissa(new window)

Kacper Rybczyński(new window)

dotchloe(new window)

Alexander Antukh(new window)

Sebastian Vasile(new window)

Shwetabh Suman(new window)

Chand Singh(new window)

Shivasurya S(new window)

Uk Hur(new window)

Sehoon Lee(new window)

Jongsung Kim(new window)

(Kai) Hrafnkell Gudmundsson

Vladimir Yakovlev(new window)

Daniel De Almeida Braga

Pierre-Alain Fouque

Mohamed Sabt

Brian Carpenter(new window)

0xtavian(new window)

Sheikh Rishad(new window)

Ibad Shah(new window)

Manojkumar J(new window) 

NDevTK(new window)

Julien Cretel(new window)

Brian Carpenter of Geeknik Labs(new window)

Ashutosh Barot(new window)

sachin kalkumbe(new window)

Piotr Smaza(new window)

Aymeric Sorek(new window)

Kunal Trivedi AKA “Zodiac”(new window)

Hamza Zaheer(new window)

Abiral Shrestha(new window)

Fabián Cuchietti at Innotec Security(new window)


Joseph Harris (Doc)(new window)

Sudip Roy

HeeChan Kim (@heegong123(new window)) of TeamH4C(new window)

Ramkumar G(new window)

Vladyslav Kotko(new window)

Suraj Mulik(new window)


Sam Schick(new window)

Abdullah Ahmet Erdem

Tushar Sharma(new window)

Talal Haj Bakry and Tommy Mysk of Mysk Inc.(new window)

Anurag Kumar(new window)

Aziz Al Aman (nxtexploit(new window))

Yash Ahmed Quashim(new window)

Thore Göbel

Arjun Singh(new window)

Karan Rathod(new window)

Ali Mansour(new window)

Garv Kataria(new window)

Arvind(new window)

Dr. Peter Hinz

Santhoshkumar Chandramohan(new window) of Ironclad Cyber Security

Deepak Saini(new window)

Alexander Staalgaard(new window)

Marek Tóth(new window)

Ramkumar G(new window)

Will Dorman(new window) of Vul Labs(new window)

Kolja Grassmann of cirosec(new window)

Safwat Refaat

Jaeheun Han

Tomáš Starý(new window)

Protect your privacy with Proton
Create a free account

Related articles

passwordless future
With the advent of passkeys, plenty of people are predicting the end of passwords. Is the future passwordless, though? Or is there room for both types of authentication to exist side-by-side?  At Proton, we are optimistic about passkeys and have int
At Proton, we have always been highly disciplined, focusing on how to best sustain our mission over time. This job is incredibly difficult. Everything we create always takes longer and is more complex than it would be if we did it without focusing on
is icloud keychain safe
If you’re on any Apple device, you’re familiar with the iCloud Keychain, the Apple password manager. It’s a handy tool that stores passwords for you and helps you manage your logins.  For a program that stores all your most sensitive data in one pla
We recently announced that Proton Pass now supports passkeys for everyone across all devices. Universal compatibility is a unique approach to implementing passkeys, unfortunately. Even though passkeys were developed by the FIDO Alliance and the Worl
How to upload and share private video
Your private videos are for your eyes only. However, not all cloud storage services are good at storing videos securely, let alone privately. In this article we explain what you can do to keep file sharing companies from having access to the videos y
Many email services, citing security reasons, require a phone number for identity verification. This creates an unfortunate paradox in which you must give up a highly sensitive piece of personal data to Big Tech. But there are simple ways to create
Can you password-protect a folder in Google Drive?
Protecting a folder with a password is a simple yet effective way of securing files. You may wonder whether you can password-protect a folder in Google Drive. We explain what access controls Google Drive offers and what you can do to improve your sec