Linnworks vulnerability disclosure program.
Here at Linnworks, we are committed to securing our customers’ data to the highest degree. We understand that trust is important, and we place the highest possible emphasis on both data security and ensuring the best possible service levels.
To protect our user’s privacy and security, Linnworks is happy to accept all vulnerability reports that adhere to our coordinated vulnerability disclosure guidelines.
Once the reported issue is addressed, we will provide the recognition by listing your name on this page. You can use this page as a way to market your skills.
In scope:
- Linnworks.net web application
- Linnworks desktop software
- Virtual printer software
Not in scope:
Any services or systems that are hosted by third-party providers or Linnworks owned property, services are physical or intellectual.
How to submit a security vulnerability.
You can encrypt the content of your email using GPG with the following key and send it to us via email to product-security@linnworks.com.
Do not use Github or any other public channels. We ask that you keep the issue confidential until we have a fix and an announcement ready.
Learn how to use the Linnworks Product Security PGP Key.
Any information which you may want to send to our Security Team should be encrypted with this key.
As a good security practice, you should validate PGP keys you receive, and not trust keys that cannot be validated. Information on how to validate the Linnworks Product Security PGP Key is available below.
To verify the authenticity of a security notification, compare its key signature with the Linnworks Product Security key documented below.
- This key will expire on 2nd May 2024
- Key ID: 6F916F680AB5F8F8
- Key Type: RSA
- Expires: 2024-05-02
- Key Size: 4096/4096
- Fingerprint: 1BAE 7051 EE6C 5B0D 06DF 58E6 6F91 6F68 0AB5 F8F8
Any services or systems that are hosted by third-party providers or Linnworks owned property, services are physical or intellectual.
Cyber Security Essentials.
In order to protect our users' privacy and security, Linnworks holds both the Cyber Essentials and Cyber Essentials Plus certificates. For more information regarding Cyber Essentials Plus view the Certificate Registry, or see our certificates below.
Recognised Security Researchers.
Muhammad Waqas
Pakistan
Tom Cupis
UK
Big Theory Ltd
UK
Sanjok Karki
Nepal
M. Muzammil Saleem
Pakistan
Faizan Ahmed
Pakistan
Hassan Ahmed
Pakistan
Muhammad Arslan Kabeer
Pakistan
Now commerce connects
See how Linnworks can help grow your business.
Connect and automate your commerce operations with Linnworks to capture every revenue opportunity.
Book a demo