Flock obtains CNA status and can self-assess product vulnerabilities
Start here
On October 13, 2026, CyberScoop reported that Flock has become a CVE Numbering Authority (CNA), able to issue and rate CVEs for its own products such as automated license plate recognition and AI cameras. Flock stated that joining the more than 550 CNAs worldwide allows faster response to researcher reports; its vulnerability disclosure policy prohibits testing customer online deployments, physical attacks, and DoS, and does not offer paid bug bounties. Katie Moussouris of Luta Security cautioned that vendor self-assessment is equivalent to grading one's own homework, and credibility depends on whether records can accurately indicate affected versions and fixes.
Generated by AI from reports · Updated 6 hr ago
Progress timeline
- CyberScoopFlock can now issue CVEs for its own products—can it still be trusted?
Flock has become a CVE Numbering Authority (CNA) and can issue and rate CVEs for its own products such as automatic license plate recognition and AI cameras. Flock says that joining the more than 550 CNAs worldwide allows faster response to researcher reports; its vulnerability disclosure policy prohibits testing customer online deployments, physical attacks, and DoS, and there is no paid bug bounty. Katie Moussouris of Luta Security cautions that vendor self-assessment is like grading one's own homework, and credibility depends on whether records accurately identify affected versions and fixes.
Related discussion
Attention trend
New sources per day
- Oct 13New1 sources (1 outlets,0 accounts)