Shieldpay · Vulnerability Disclosure

Shieldpay Vulnerability Disclosure

Vulnerability disclosure

Shieldpay publishes a vulnerability disclosure policy for reporting security issues. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyPaymentsEscrowLegal TechnologyFintechComplianceKYCBanking
Program: security.txt present

Disclosure Policy

Policy
https://www.shieldpay.com/security/vulnerability-disclosure-policy

Security Contact

Contact
security@shieldpay.com

Source

Vulnerability Disclosure

shieldpay-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-21'
method: searched
probe: true
source: https://www.shieldpay.com/.well-known/security.txt
policy:
- https://www.shieldpay.com/security/vulnerability-disclosure-policy
contact:
- security@shieldpay.com
encryption:
- https://www.shieldpay.com/.well-known/pgp_key.txt
- https://keys.openpgp.org/vks/v1/by-fingerprint/9F4351B4186EBD4539AE676FBEDDCBFB3F55D80B
bug_bounty: false
safe_harbor: true
security_txt: well-known/shieldpay-security.txt
expires: '2028-01-01T00:00:00.000Z'
details: >-
  Shieldpay publishes a PGP-signed RFC 9116 security.txt and a Vulnerability
  Disclosure Policy with explicit safe-harbour for good-faith researchers. No
  monetary/bug-bounty rewards; public recognition with consent. Out of scope:
  theoretical reports without PoC, reconnaissance-only findings, third-party
  services, and test/sandbox environments.
evidence:
- source: well-known/shieldpay-security.txt
  kind: security.txt
- source: https://www.shieldpay.com/security/vulnerability-disclosure-policy
  kind: disclosure-policy