Security

Reporting a vulnerability

If you believe you have found a security vulnerability in any HustlePay service, please email security@hustlepay.net. Include a description of the issue, the steps to reproduce it, and any relevant URLs or request details.

Our machine-readable contact details are published at /.well-known/security.txt.

Good-faith disclosure

We welcome reports from security researchers acting in good faith. We ask that you give us reasonable time to investigate and address an issue before disclosing it publicly, avoid accessing or modifying data that does not belong to you, and avoid actions that degrade our services for other users. We will not pursue action against researchers who follow these guidelines.