generated: '2026-06-20'
method: searched
probe: true
source: https://www.autodesk.com/trust/security/vulnerability-disclosure-policy
policy:
- https://www.autodesk.com/trust/security/vulnerability-disclosure-policy
programs:
- name: HackerOne
  type: vulnerability-disclosure
  note: Autodesk runs its vulnerability disclosure program through HackerOne.
- name: Trend Micro Zero Day Initiative (ZDI)
  type: coordinated-disclosure
  note: Autodesk partners with Trend Micro's Zero Day Initiative for third-party threat research.
advisories: https://www.autodesk.com/trust/security-advisories
notes: >-
  CVEs are published as Autodesk Security Advisories on the Trust Center and to the National
  Vulnerability Database (NVD), with researcher acknowledgement. Probe of /.well-known/security.txt
  was blocked (HTTP 403 to automated fetch); policy located via the Autodesk Trust Center.
evidence:
- source: https://www.autodesk.com/trust/security/vulnerability-disclosure-policy
  kind: disclosure-policy
- source: https://www.autodesk.com/trust/security-advisories
  kind: security-advisories