It’s important that anybody is able to contact us, quickly and effectively, with security concerns or information pertinent to our customers’ privacy or the confidentiality, integrity or availability of our systems. Therefore we operate a responsible disclosure policy to help security professionals and others alert us swiftly with the minimum of fuss.
Starling Bank Limited will make a best effort to meet the following response targets for hackers participating in our program:
We’ll try to keep you informed about our progress throughout the process.
At all times act responsibly and in the best interests of Starling Bank and our customers.
It is important that we treat your communication as a responsible disclosure and not an attack or extortion.
You agree to the terms of our Privacy Notice __and that we can use your submission and its contents to ensure the security, integrity and reliable operation of our technology and business. Your submission should contain:
Our ability to respond quickly and effectively to important communication and
in conjunction with hackerone, we take steps to manage spam and quickly
identify high quality submissions.
We discourage and will not respond to:
Any activities conducted in a manner consistent with this policy will be considered authorized conduct and we will not initiate legal action against you. If legal action is initiated by a third party against you in connection with activities conducted under this policy, we will take steps to make it known that your actions were conducted in compliance with this policy.
You must treat all information about our systems, staff or customers that comes into your possession or that you otherwise become aware of, which is not publicly available, as strictly confidential and not share or otherwise use it for any purpose other than emailing it to us as a submission as described above.
Thank you for helping keep Starling Bank Limited and our users safe!
Contact us if you want more information.