Shopify Bug Bounty
We take merchant trust and safety very seriously. Our maximum bounty of $200,000 reflects that.
Last Updated: October 14, 2026 at 7:00 PM UTC
Program statistics
These statistics may vary from those reported by HackerOne due to differences in data collection and reporting criteria.
Total bounties paid this week: 6 350 $. Total bounties paid last week: 10 900 $. Last bounty paid: 6 350 $
10 097 511 $
Total bounties paid
1 483 508 $
Total bounties paid this year
24 250 $
Total bounties paid this month
1,784
Reports received in the last 90 days
2,429
Total Reports Resolved To Date
Submit a vulnerability
1
Review rules and/or scope
Start by exploring our scope, eligibility and known issues to understand how to discover vulnerabilities effectively.
2
Submit report
Once you’ve identified a vulnerability, submit your report to us for review.
3
Keep up with the process
Stay informed throughout the process of our Bug Bounty workflow.