Vulnerability Disclosure Policy

Mesh Payments is committed to providing a robust and secure service to our customers and  maintaining the security, confidentiality, availability, privacy, and integrity of our products is a  priority at Mesh Payments. Therefore, Mesh Payments appreciates the work of researchers in  order to improve our security and/or privacy posture. We are committed to creating a safe,  transparent environment to report vulnerabilities.

If you have come across a security or privacy vulnerability that could impact Mesh Payments or our customers, we encourage you to report this immediately at We will investigate all valid reports and fix the vulnerability as soon as we can. We encourage you to follow Mesh Payments’s Vulnerability Disclosure Policy and make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service during your research.


Services that Mesh Payments provides or any Mesh Payments product are in scope. The  following are excluded from the Responsible Disclosure Policy (note that this list is not  exhaustive):

Accepted Vulnerabilities Are the Following:

Out of Scope Vulnerabilities

Mesh Payments pledges not to initiate any legal action against researchers if they adhere to the guidelines outlined in our Vulnerability Disclosure Policy. In order to protect our customers, Mesh Payments requests that you not post or share any information about a potential vulnerability in any public forums/sites until we have researched, responded to, and addressed the reported vulnerability and informed customers if needed.

Due to the Children’s Online Privacy Protection Act (COPPA), we cannot accept submissions from children under the age of 13.

This program is not open to any individual on, or residing in any country on, any U.S. sanctions lists.

The decision to pay a reward is entirely at our discretion. You must not violate any law. You are responsible for any tax implications or additional restrictions depending on your country and local law. We reserve the right to cancel this program at any time.