Security & compliance
Cutshort security
How we host and protect data on our sourcing platform — plus downloadable documents for enterprise due diligence.
Bug bounty program
If you have identified a vulnerability on any of our web or mobile app properties, please follow the steps below for responsible disclosure.
- Email [email protected] with the details needed to recreate the vulnerability. This may include screenshots, videos, or simple text instructions.
- Optionally share your phone number so our security team can reach you if further inputs are needed to identify or close the problem.
- If the vulnerability could be used to extract customer or system information, or impair our ability to function normally, do not exploit it in the production system. This is required for us to consider your disclosure responsible.
While we appreciate the inputs of whitehat hackers, we will take legal recourse if identified vulnerabilities are exploited for unlawful gains, to access restricted customer or system information, or to impair our systems.
Bug bounty program document
Full program PDF with additional scope and reporting guidance