Shopify Security Policy

Shopify's Whitehat Bug Bounty program rewards researchers for discovering security vulnerabilities.

You can submit a report via HackerOne.