Found a security problem?

What to send

• The address or part of SBCommerce.net affected.
• Steps to reproduce it, and what you saw.
• How you think it could be misused.

While you look

• Test only with a store and accounts of your own.
• Don’t read, change or delete anyone else’s data.
• No denial of service, spam or tricking people.
• Give us a fair chance to fix it before you tell others.

A problem with one shop?

A shop selling something unlawful or misusing your data is a report, not a security issue: use ourreport form, also linked as “Report this store” in the footer of shops based in the EU.

Rewards

We don’t run a paid bug bounty, so there is no payment for reports.