A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----


Hash: SHA256





# Monzo Security Bug Bounty


Contact: https://app.intigriti.com/programs/monzobank/monzo-vdp/detail





# Monzo Security Bug Bounty Guidelines


Policy: https://app.intigriti.com/programs/monzobank/monzo-vdp/detail





# Researcher Acknowledgements


Acknowledgments: https://app.intigriti.com/programs/monzobank/monzo-vdp/leaderboard





# Monzo Security Contact Address


Contact: mailto:security@monzo.com





# Preferred Languages at Monzo


Preferred-Languages: en





# Monzo PGP Public Key


Encryption: https://monzo.com/.well-known/monzo-publickey.asc





# Careers at Monzo


Hiring: https://monzo.com/careers/





# Location of security.txt


Canonical: https://monzo.com/.well-known/security.txt


-----BEGIN PGP SIGNATURE-----





iQJHBAEBCAAxFiEE3NOClmEID1JXFAWSAvDa5e3pfSsFAmU5HpgTHHNlY3VyaXR5


QG1vbnpvLmNvbQAKCRAC8Nrl7el9K9xuEACxoF9k8PSGzI1DBA9wc0wAbVHRoFOX


yd/qlBXU0jPoysKhnRmtpZVz+ujwxmraeh5M3kzPBHFXYXQ2e/4kjE+lUvjVLcuJ


pBCgSK2eY5hhUO7/gUKIKpa0DZ4+06CNEG8cHUtOUItyyzJUBWjFAKKEj0ehnnl0


mN6U7f8yYXpz66YPiDHmb04gXNQP2S+Wrd/XPv31t0UhMNxvnIe/3cSOAYKZZjgK


/ZO6SHkGzgPApM6qmVljhtCtHHFX5Ug5jpUYdm/lrk79/BXnElZrA+yX0TJu+MOQ


dyG9JKw3UfaY64xDqerYUx2tlyBjsVbALUS9ZgTUoGZF6XGTIPQ8/UaYZPK2/mIY


4otsqjewhK/A8YuwvRM3vqTHoBtitU2foFq41rGg7y73SgwBAcLWGjrU6eOeMPht


Ium3RiLWpAjfrNhGnviQCKny3ceDLZdQ2Y6ht/KIuX/aRua7NJCoTDDJ+dWrb8wE


tnwlYlR3V6FozDLa8ytigS8UePkZSXoQXWLW0B2kH58zujMXHXsSmBSSwtUXaJ/N


j1ICi4YIy06nU5Lsfgy161by+0ht4RXJYJKTp4z+mGw+8UEWEf0tUbRv3lwBsDuf


pegoGdcUQ2uMES3YUCCnPm5/FCRhRjS1f9yxh10ioS03UVsl8ZlefUSS8sgtw7GU


D3TNjSPj57D9vQ==


=OTjg


-----END PGP SIGNATURE-----