From MozillaWiki
Jump to: navigation, search
“Individuals’ security and privacy on the Internet are 
fundamental and must not be treated as optional.”
  - Mozilla Manifesto Principle 4

The Mozilla Security community provides leadership in security by building security features, testing software and systems, and leading industry standards to ensure that individuals retain the ability to make meaningful choices about security and privacy on the Internet.

This page documents the security-related activities where Mozilla active, and how to join us.

Reporting Security Issues

Mozilla relies on the security community to help secure our products and websites by reporting security issues. Our preference is to receive bug reports via our bug tracking system Bugzilla, however emailing (preferably encrypted) is also an option.

Details on the way we classify security bugs can be found here.

Security at Mozilla

Who are we?

Security at Mozilla is distributed among the following teams:

Contacting Us

The Mozilla security team is available via a number of channels:

  • Via email
    • to contact us privately or reporting security bugs
    • this is the best place to ask security questions that don't need to be private. You might also try searching this list for answers to your questions
    • You can also find us on a number of security related mailing lists including W3C WebAppSec
  • Via Mozilla IRC
    • #security - general security discussions
    • #contentsecurity - browser security engineering, DOM, CSP, Origins, content blocking etc
    • #infosec - general infosec discussions
  • Join our security/meetings public meetings
  • Attend a Security Talk given by one of the security team

Information for developers

Security Bug Processes

Request a Security or Privacy Review

Contributing to the security of Mozilla products

There are a range of ways to contribute to security engineering at Mozilla.


  • Implement security features
  • Fix outstanding security bugs
  • Contribute to security feature development

Security Testers

  • Test Firefox or Mozilla Websites as part of our bug bounty programs


  • Test & provide feedback on new security features
  • Improve security documentation

Mozilla Official Sites