Security and compliance

HTTPS

GOV.UK Content API follows government HTTPS security guidelines. The Hypertext Transfer Protocol Secure (HTTPS), which involves the Transport Layer Security (TLS) protocol, is used by the platform to provide secure connections.

Security patches

We treat security vulnerabilities in the platform and library code in the GOV.UK Content API as our highest priority. The codebase will be updated as soon as possible when vulnerabilities are discovered or reported.

We frequently upgrade the framework and library code in GOV.UK Content API to the latest versions for security and feature enhancements.

Report vulnerabilities

If you believe there is a security issue with GOV.UK Content API, read our security policy and contact us immediately.

Please don’t disclose the suspected breach publicly until it has been fixed.