Security

Security philosophy

Reporting vulnerabilities

Flagging existing issues as security-related

Supported versions

Expectations

Receiving security updates

Best practices

The Flutter team takes the security of Flutter and the applications
created with it seriously. This page describes how to report any
vulnerabilities you might find, and lists best practices to minimize
the risk of introducing a vulnerability.

Security philosophy

Flutter security strategy is based on five key pillars:

Identify: Track and prioritize key security risks by
identifying core assets, key threats, and vulnerabilities.

Detect: Detect and identify vulnerabilities using
techniques and tools like vulnerability scanning,
static application security testing, and fuzzing.

Protect: Eliminate risks by mitigating known
vulnerabilities and protect critical assets against source threats.