Our Responsible Disclosure Policy
Security is a top priority for us and we take it very seriously. We put a lot of effort into our application, infrastructure, and processes to ensure that BigBasket is safe and secure for our customers to shop their groceries online. We also put a lot of effort in ensuring the security of our customer’s data. However, in case you are able to discover any security vulnerability, we would appreciate your help in responsibly reporting it to us so that we can investigate and address it as soon as possible.
For any responsible disclosure of a security vulnerability in our website (www.bigbasket.com), mobile application (bigbasket, bbdaily and bbinstant ios/android app) or our services (APIs under www.bigbasket.com),
- Send a mail to security@bigbasket.com with complete details, that would allow us to reproduce the vulnerability. Feel free to include POC code, screenshots, videos that would make it easier for us to reproduce it. Please also include your contact details such as phone number so that we can reach you if we need more information from you.
- All the communication with us should remain absolutely confidential. You must destroy all the artifacts mentioned above (code, screenshots, videos) after the vulnerability is resolved.
- In case you find a vulnerability that allows system access, you should refrain from proceeding further. You should not attempt to disrupt our service, destroy data or violate the privacy of customers.
Please note that exploiting the vulnerability for own or others benefit would mean that the disclosure is not responsible and would be considered as an attack to our service and infrastructure for which, we might take a legal recourse.
Bug Bounty Reward Method
All qualified bugs will be rewarded the money in INR only & the due amount will be credited to your BigBasket wallet only.
Hall of Fame
We would like to thank the following researchers who have responsibly disclosed Security vulnerability to us and helped us make our system more secure. A big thank you!
- Aditya Dixit
- Aman Sinha
- Akshay Gaikwad
- Anurag Jain
- Arcot Manju
- Avinash Kumar
- Chirag Savla
- Dheeraj Kumar
- Dinesh Kumar
- Gantala Sai Dheeraj
- Gaurang Bhatnagar
- Gaurav Popalghat
- Gaurav Ghule
- Gourab Sadhukhan
- Jai Bhaskaran
- Jatin Dhankhar
- Karan Tank
- Kunal Bahl
- Ketankumar Godhani
- Krishna B
- Kshitiz Raj
- Lohith Gowda M
- Magesh Baskaran
- Maahir Sharma
- Nitesh Surana
- Pardeep Battu
- Pethuraj M.
- Rakesh Kirola
- Raja Pateriya
- Rajan Dinkar
- Rohan Negandhi
- Sachin Gupta
- Sachin Sharma
- Saddam Maniyar
- Sai teja prashanth
- Saket Taneja
- Salman Asad
- Santa Singh
- Shatrudhan Shrivastava
- Shivam Pandey
- Shivang Trivedi
- Shezad master
- shrikara k
- Sukhdev Kumar
- Sundar Lal Baror
- Tameem Khalid
- Ubaid Ahmed
- Urvish Sandanshiv
- Vivek Shankar Perkawar
- Vivin Joseph
- Viraj Sharma
- Pavan Kumar Chinta
- Monish Basaniwal