Shopify Bug Bounty
We take merchant trust and safety very seriously. Our maximum bounty of $200,000 reflects that.
Last Updated: April 7, 2025 at 12:00 AM UTC
Program statistics
These statistics may vary from those reported by HackerOne due to differences in data collection and reporting criteria.
$6,239,968
Total bounties paid
$307,085
Total bounties paid this year
$12,400
Total bounties paid this month
925
Reports received in the last 90 days
2,160
Total Reports Resolved To Date
Submit a vulnerability
Review rules and/or scope
Start by exploring our scope, eligibility and known issues to understand how to discover vulnerabilities effectively.
Submit report
Once you’ve identified a vulnerability, submit your report to us for review.
Keep up with the process
Stay informed throughout the process of our Bug Bounty workflow.
Resources
A Look Inside Our Bug Bounty Process
Discover the journey your report takes from submission to resolution.
Read nowGetting Started in our Bug Bounty Program
Learn the first steps to take in our program, including creating an account and testing guidelines.
Read nowFresh Features Ahead: Your Bug Bounty Experience Just Got Better!
Find everything at our new site and enjoy enhanced rewards and resources!
Read now