Details

Security is a top priority for us and we take it very seriously. We put a lot of effort into our application, infrastructure, and processes to ensure that BigBasket is safe and secure for our customers to shop their groceries online. We also put a lot of effort in ensuring the security of our customer’s data. However, in case you are able to discover any security vulnerability, we would appreciate your help in responsibly reporting it to us so that we can investigate and address it as soon as possible.

For any responsible disclosure of a security vulnerability in our website, mobile application or our services,

Send a mail to [email protected] with complete details, that would allow us to reproduce the vulnerability. Feel free to include POC code, screenshots, videos that would make it easier for us to reproduce it. Please also include your contact details such as phone number so that we can reach you if we need more information from you.
All the communication with us should remain absolutely confidential. You must destroy all the artifacts mentioned above (code, screenshots, videos) after the vulnerability is resolved.
In case you find a vulnerability that allows system access, you should refrain from proceeding further. You should not attempt to disrupt our service, destroy data or violate the privacy of customers.

Please note that exploiting the vulnerability for own or others benefit would mean that the disclosure is not responsible and would be considered as an attack to our service and infrastructure for which, we might take a legal recourse.