Veracent Intelligence

All questions · SEC-03

Is there a published vulnerability disclosure or bug bounty route?

Answered for 8 of 12 firms. Published policy page

DIGITAL MONEYBOX LIMITED

Stated by the firm
Contact: mailto:infosec@moneyboxapp.com

The document provides a security contact email for reporting issues, listed as infosec@moneyboxapp.com.

Published by the firm · Digital Moneybox Limited · Check the source

Contact: https://hl.vulnerability-disclosure.com/p/Submit-a-report

The document provides a contact route for submitting a vulnerability report.

Published by the firm · Hargreaves Lansdown Asset Management Limited · Check the source

Policy: https://hl.vulnerability-disclosure.com/p/Policy

The document provides a published vulnerability disclosure policy page.

Published by the firm · Hargreaves Lansdown Asset Management Limited · Check the source

If you have found a cybersecurity issue or vulnerability in any of our applications, then we would like to hear from you through our responsible disclosure program, which is run in collaboration with JPMorgan Chase.

The document states there is a Responsible Disclosure Program for reporting cybersecurity issues or vulnerabilities, run in collaboration with JPMorgan Chase.

Published by the firm · J.P. Morgan Personal Investing Limited · Responsible Disclosure Program · Check the source

Our responsible disclosure program is managed by our third party vendor who will review and validate cybersecurity issues within the scope of this program.

The document states that the responsible disclosure program is managed by a third party vendor who reviews and validates cybersecurity issues within the scope of the program.

Published by the firm · J.P. Morgan Personal Investing Limited · Responsible Disclosure Program · Check the source

See our responsible disclosure program

The document provides a link to view the responsible disclosure program.

Published by the firm · J.P. Morgan Personal Investing Limited · Responsible Disclosure Program · Check the source

MONZO BANK LIMITED

Stated by the firm
# Monzo Security Bug Bounty Guidelines Policy: https://app.intigriti.com/company/programs/monzobank/monzopublicbugbountyprogram/detail

The document publishes a bug bounty policy route for security vulnerability disclosure, with a link to the policy page.

Published by the firm · Monzo Bank Limited · Check the source

REVOLUT LTD

Stated by the firm
Contact: https://www.revolut.com/responsible-disclosure-program

Revolut publishes a responsible disclosure program with a security contact for reporting vulnerabilities.

Published by the firm · Revolut Ltd · Check the source

STARLING BANK LIMITED

Stated by the firm
We are actively working to put in place a bug bounty program that will facilitate and regulate financial reward for submissions but we cannot do so at this time.

Starling Bank states it does not currently offer a bug bounty program but is working to put one in place.

Published by the firm · Starling Bank Limited · Recognition · Check the source

we operate a responsible disclosure policy to help security professionals and others alert us swiftly with the minimum of fuss

Starling Bank operates a responsible disclosure policy allowing security professionals to report vulnerabilities to the bank.

Published by the firm · Starling Bank Limited · Responsible Disclosure Policy · Check the source

TRADING 212 UK LIMITED

Stated by the firm
Contact: mailto:security@trading212.com

The document provides a security contact email, mailto:security@trading212.com, for reporting security issues.

Published by the firm · Trading 212 UK Limited · Check the source

WISE PAYMENTS LIMITED

Stated by the firm
You can submit a report on our Bugcrowd program page , or by filling out the form below:

The Responsible Disclosure page explains how to report a security issue, either via the Bugcrowd program page or a form.

Published by the firm · Wise Payments Limited · How to report an issue · Check the source

E-mail: Security Operations Center <soc [@] wise.com>

The page provides a Security Operations Center email contact for reporting issues.

Published by the firm · Wise Payments Limited · Contact · Check the source

If you find a security vulnerability we hope you’ll let us know. We run a bug bounty program through Bugcrowd, all the details you need are there.

Wise states it runs a bug bounty program through Bugcrowd for reporting security vulnerabilities.

Published by the firm · Wise Payments Limited · Responsible Disclosure · Check the source

No qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.

No qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.

No qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.

No qualifying source was located within the evidence window. This records what we could not confirm, and carries no inference about the firm.

Every firm here was asked the same question against the same published standard, and every answer quotes the passage it came from. Where the answers differ, the difference is in the firms’ own documents, not in how we read them.

Darker text marks stronger evidence. A statutory register prints at full strength; a firm’s own marketing prints lighter. The methodology sets out the weightings.