Shopify Security Policy

Shopify's Bug Bounty program rewards researchers for discovering security vulnerabilities.

You can submit a report via HackerOne.