---
title: "TYPO3 security overview"
manual: "TYPO3 Explained"
version: "12.4"
permalink: "https://docs.typo3.org/permalink/t3coreapi:security-introduction@12.4"
source: "Security/Introduction/Index.rst"
rendered: "2026-10-21T15:29:37+00:00"
---

> [!WARNING]
> **Attention**
>
> TYPO3 v12 has reached end-of-life as of April 30th 2026 and
> is no longer being maintained. Use the version switcher on the top
> left of this page to select documentation for a supported version of TYPO3.
>
> Need more time before upgrading?
> You can purchase Extended Long Term Support (ELTS) for TYPO3 v12 here:
> [TYPO3 ELTS](https://typo3.com/services/extended-support-elts).

# TYPO3 security overview {#security-introduction}

TYPO3 takes security seriously—both in its Core development and through
the work of the official TYPO3 Security Team. But security is not just a
feature of the system. It is a shared responsibility that involves system
administrators, integrators, editors, and developers.

This chapter outlines common risks and how to mitigate them. It also
explains how the TYPO3 Security Team handles incidents and how to respond
if your site is compromised.

Security is not a fixed state—it is an ongoing process. Protecting your
site requires regular review, timely updates, and responsible access
control.

## Reporting a security issue {#security-introduction-report}

If you would like to report a security issue in a TYPO3 extension or
the TYPO3 Core  system, please report it to the TYPO3 Security Team.
Please refrain from making anything public before an official fix is
released. Read more about the process of incident handling by the
[TYPO3 Security Team](https://docs.typo3.org/permalink/t3coreapi:security-team@12.4).