Shopify Bug Bounty
We take merchant trust and safety very seriously. Our maximum bounty of $200,000 reflects that.
Last Updated: September 14, 2026 at 10:00 PM UTC
Program statistics
These statistics may vary from those reported by HackerOne due to differences in data collection and reporting criteria.
Total bounties paid this week: 0 щ.д.. Total bounties paid last week: 510 125 щ.д.. Last bounty paid: 5000 щ.д.
10 040 861 щ.д.
Total bounties paid
1 426 858 щ.д.
Total bounties paid this year
519 725 щ.д.
Total bounties paid this month
1,873
Reports received in the last 90 days
2,426
Total Reports Resolved To Date
Submit a vulnerability
1
Review rules and/or scope
Start by exploring our scope, eligibility and known issues to understand how to discover vulnerabilities effectively.
2
Submit report
Once you’ve identified a vulnerability, submit your report to us for review.
3
Keep up with the process
Stay informed throughout the process of our Bug Bounty workflow.