Responsible disclosure

Sky recognises the important contribution of the security research community. If you believe you've found a security issue and would like to tell us about it, please follow the process below:

What to report

Please only report security issues such as, but not limited to: XSS, XXE, CSRF, SQLi, Local or Remote File Inclusion, authentication issues, remote code execution, authorisation issues and privilege escalation. Please don't include any Sky-internal data with your report.

If you have any concerns about privacy or data protection, please see the "Contacting Sky" section of our Sky Privacy article.

If you have any problems with your Sky services (including accessing your account), try our online help.

Why report

We want to ensure that Sky's services continue to be as secure as possible so we'll review your report quickly. Once you've submitted your report you'll receive a message to confirm receipt and the next steps.

How to report

By submitting a report to Sky, you agree to keep the subject matter of the report, as well as all subsequent related conversations with Sky, strictly confidential. This is so we have the opportunity to investigate and take action as needed.

Please submit your report by selecting the Yes button at the bottom of the page and following the on screen instructions.