Our Responsible Disclosure Policy
Security is a top priority for us and we take it very seriously. We put a lot of effort into our application, infrastructure, and processes to ensure that BigBasket is safe and secure for our customers to shop their groceries online. We also put a lot of effort in ensuring the security of our customer’s data. However, in case you are able to discover any security vulnerability, we would appreciate your help in responsibly reporting it to us so that we can investigate and address it as soon as possible.
For any responsible disclosure of a security vulnerability in our website (www.bigbasket.com), mobile application (bigbasket, bbdaily and bbinstant ios/android app) or our services (APIs under www.bigbasket.com),
- Send a mail to security@bigbasket.com with complete details, that would allow us to reproduce the vulnerability. Feel free to include POC code, screenshots, videos that would make it easier for us to reproduce it. Please also include your contact details such as phone number so that we can reach you if we need more information from you.
- All the communication with us should remain absolutely confidential. You must destroy all the artifacts mentioned above (code, screenshots, videos) after the vulnerability is resolved.
- In case you find a vulnerability that allows system access, you should refrain from proceeding further. You should not attempt to disrupt our service, destroy data or violate the privacy of customers.
Please note that exploiting the vulnerability for own or others benefit would mean that the disclosure is not responsible and would be considered as an attack to our service and infrastructure for which, we might take a legal recourse.
Hall of Fame
We would like to thank the following researchers who have responsibly disclosed Security vulnerability to us and helped us make our system more secure. A big thank you!
- Aditya Dixit
- Aman Sinha
- Anurag Jain
- Arcot Manju
- Chirag Savla
- Dheeraj Kumar
- Gaurang Bhatnagar
- Gaurav Popalghat
- Kunal Bahl
- Ketankumar Godhani
- Krishna B
- Magesh Baskaran
- Nitesh Surana
- Pethuraj M.
- Rakesh Kirola
- Rajan Dinkar
- Sachin Gupta
- Saddam Maniyar
- Santa Singh
- Shatrudhan Shrivastava
- Shivam Pandey
- Shezad master
- shrikara k
- Sundar Lal Baror
- Ubaid Ahmed
- Urvish Sandanshiv
- Vivin Joseph