Linnworks Vulnerability Disclosure Program

Here at Linnworks, we are committed to securing our customers’ data to the highest degree. We understand that trust is important, and we place the highest possible emphasis on both data security and ensuring the best possible service levels.

To protect our users’ privacy and security, Linnworks is happy to accept all vulnerability reports that adhere to our coordinated vulnerability disclosure guidelines.

Once the reported issue is addressed, we will provide the recognition by listing your name on this page. You can use this page as a way to market your skills.

In scope:

  • Linnworks.net web application
  • Linnworks desktop software
  • Virtual printer software

Out of scope:

  • Any services or systems that are hosted by third-party providers or Linnworks-owned property, services are physical or intellectual

How to submit a security vulnerability.

You can encrypt the content of your email using GPG with the following key and send it to us via email to product-security@linnworks.com.

Learn how to use the Linnworks Product Security PGP Key.

Any information you may want to send to our Security Team should be encrypted with this key.

As a good security practice, you should validate the PGP keys you receive and not trust keys that cannot be validated. Information on how to validate the Linnworks Product Security PGP Key is available below.

To verify the authenticity of a security notification, compare its key signature with the Linnworks Product Security key documented below.

Do not use GitHub or any other public channels. Please keep the issue confidential until we have a fix and an announcement ready.

This key will expire on 10th December 2026

  • Key ID: AD79AD0FE339121A
  • Key Type: RSA
  • Expires: 2026-12-10
  • Key Size: 4096/4096
  • Fingerprint: 66F6 87F7 332D 7B43 7E17 7452 AD79 AD0F E339 121A
-----BEGIN PGP PUBLIC KEY BLOCK-----

xsFNBGdZVPsBEADDPZvvlaLCIKJCjDB07/zZzrmQ7+Ib6MRzQ+Jn8CTi2br1 /69lU648huUMrEsfnAWhdj6I/ci/H6saCQ4pZhAjBjL6CBdUukiI+iONNUVs 5KjjeEAKKPVzmh2HK9oMs2gdpj4puXNoxS+1ZdUiPq6neSYj2xIB+VapDWoa QmHacChkDM3Z2Ple1sixzjv4K7/gNlN7t2zlTWzQE1AQS6+6I5lUF6TLY6u4 qbY9+991i4/J10JgBp/U3Om4jnXIK3pbaIaaRXa0l5arpJgDsu2XIixZsvLO DtNS8XjUoj6xq4DJUvxZW/tQgq6PTK8J8bjTUzjNmL9nM4KlJQ1g6XJ+ZDuJ LVFk18vYivPnAi11xK8ziKlgRd2y+UM9lhhHF9MsSfbZZF9Nvfmz/eqnSj48 aQ21l1ywEbgHVT52/rCpTpCn1IufICjj/EpJWseZcDqJPzUnm+Mi9EQcmzsw xO8CIUuU1x4G+w7v5jANs0rrT2GUcg3qLDWy8Sw9n6ei/++j6NML3AfRaBhQ 0R2eYt/IKGq8Gla713wniNyr7eiNX1WSWNMqDI3XdMTeKLW5W7rUB6ceLUTV ks6u3SVWODQI4TYM5FtBKWbgGFNwSPwX3ldBIiZEgSRAJxgmfaFlHF/ypeNe jeAPwbxEw7WewLKlethE/rBeEMClNzz98s2I7QARAQABzTBUZWFtIFNlY3Vy aXR5IDIwMjQgPHRlYW0tc2VjdXJpdHlAbGlubndvcmtzLmNvbT7CwYoEEAEI AD4FgmdZVPsECwkHCAmQrXmtD+M5EhoDFQgKBBYAAgECGQECmwMCHgEWIQRm 9of3My17Q34XdFKtea0P4zkSGgAAqlIP/RNBCfQ3owDBI31/Hd9lIRaFBAQa ZtEkSLC53hzvdDLGk5G66i6ck/xp2UlAnnvjzrmd65tkCHNzc5BwL5+Wjl8O P9D5y7I9ENMU1Z6AChEKgaguQsULznCgEpJCeLXDPMlrZ6XwA2UH7m4r+8Zj jUt+C6QV88hS8ykIbxtQNW17wulaRw4e6KUQ6rDOVARXMXWXqoGswgPD8cGa v3Uh5s5397T5MfrW+xM/0Oei8wWjrtNzYq9tsr/H3zp+kKKHnS8B5Hg9LKYd RyDBC9/cPO0NZEQo/Xy0MHuJ7/XK1rduaFTX9pyitzSGzok7YR6zOKsr/5/G gpGy391P7aI4Ipn+bG1IjDsO09o+umAlMKkgn3/gxX0+J5K/CnaB3PKHpMP4 PEh6kVOsxSjpEIN7/Bp4rHzRBoVw7bagimjPbJBk1ehlFZrNVzU3ciOATfNb mh6l5wOxdLG3ceQSI1ZUMBxw5HuHMizjE2z64v+9z/75OIpy0xWNta6DHdD6 oAWJywpxnSjLxbhy1MJ7bVCGbhwuC4jJP8w50xPYWDf65L1Ib1Vx3Zeh6eqE KKwMWLvkpaWSqYQ3+3l11Upp79hoGYHS1hYY91lc/RWXmEi1K0iQml2Q4xVX dh9uRnawaOlkF3HmMDwCRruDm0kaPLq/LX/R6nKk3VaEw67QdhFwII3zwsGQ BBABCABEBYJnWVV8BYkDwHplBAsJBwgJkK15rQ/jORIaAxUICgQWAAIBAhkB ApsDAh4BFiEEZvaH9zMte0N+F3RSrXmtD+M5EhoAANKBD/0UPfpnCDUgAwCq lnxN65iHdJj/fAl2R2Ek0yatfAca3jFHMzK0e8cBokguvvDrESTvK/I69veT K8Zt0aq+VOQQkTDU3fXI69iD+HaEd+5sKnVgDLS5jDlEPxuwJw+ykO7xz2Pd suTlybF8W5NHDyyaR/6Ct3NVbNuB9O9bt2RqhjHCQRx5qU5SYNXUqUfMI8Ph y6jmIjfn0sHSOeu1VpwRVx+hi79EaaAntKKHhJZGsh1o1H3hqoTi12W3c7a+ eGdJAoHhmdeI+aavHi5s3uyQ5amsUZRP89uHvhGEZjpA8Mmiv8Rzdo1N+T0J u1AKGeEx7QJ7mYa7k1xd0vK2BbVouEqis9heMvmT58FdMQYlhAzzBoj4lrzQ +ZsqttBLHLJHfq7EKFAFQm+PoW+VLhodVtBbZ1yZEVLSm3obL+uxRC0hIacb 2nXSuVpQRcAjpI9rWpi9Lp9yQd7dx10HKI4vvFWTGhGtGXlhAvG6j4jn56OE rwjSonyF+o3CyNJF/o3IzKb4cCUCyvErO7MeJvbR8J07UrrLJg92PD8gzY40 aaFUz58scrSdNSaA0sjhRN3s/k4+WRYOcAGoE73Vhf2wQpIfD8ZePHRD2s3k CvSj7NVXgGk0OaW+FRuu5UXn2mYZEtb4C8b8tOkdprzEbaJQmEVBlZ50ttS4 Y9X4kKEoX87BTQRnWVT7ARAArG4NdB8TcAbUpF65Tj381JGrBC0qxP7bw7Z/ iBejI1u6HDxd0FkwopsXxJEo+iBxKApTq28u82h4tywNQxaHIbGjQ2LXmuKg Kc0FGjYLYnPhebO1d9p8tK5xaqo4F9xvi+d/98SaQyy96tHpqGB839Kq7IGS rqO4sE9ab98V+/QoNnpEQBQuVM6aZVt5N75ZrcuREF5cDV8rDAcHofhNOad0 ZNHWDs11GbEoRvriDBa1KGYzPkMtiVFsa9WL4fQMhULluAyKgVzVlDePufg8 0TWRRetEz4xiSysNRphRwjNKUfWcov7/IDlmWdwQ+OkLwEO5VmtDLyRt85Sr c0LzCD3Jwj7XY1EZ2yGtBQoeutOJ2f6j1DY2h3Gz9e3TII0k6F/wdrKnj8Io LnFQzBrb7DgM1PKL7qUktofeklD7z4q+sJ0AoQD6Lj64ydgP0DddNXZkcGxf SahxOVk4aDWhFgzy2uq6eqhD/QL2mTb/klK97/Lc9WinzkwVCLoThbLu5k+b 3sL2Z3E1Z95GK61zeZ9SQr3RSHXip9fxmmJ7iq3Dgbkq2/F3NRYMj3Yjlb6S bxm2gbdwLipqaK/SYMYaE1xP7xn6a5dMiIVlaY+BnAwzQ1qHZ/mUQ/TTEiFs 0CDNu1F7U1U0WS+AtJvG6T10P2rCKAEp6duvgRFJsLbFXHMAEQEAAcLBfAQY AQgAMAWCZ1lVfAWJA8B6ZQmQrXmtD+M5EhoCmwwWIQRm9of3My17Q34XdFKt ea0P4zkSGgAAWYEP/1UA/DGYmT8BqlYiXODHnakTK7NBbDrL/eDPoiivjNyI hpQ0IIKc54ZAr8W6Cgo6uR8PgAZJVk4+QGllC5AJWtaU9ZSRH1hGJAam5BkU 7HASkXzhbxCaGTBeR+vbn4T/NhhnEUF/zluH0VlMi4+yx/9NjPtLUzryWBAT HPp4O1r04jotPbWJeMFJWvA9fE746vUmNTaQW7PQAXAy7R8hSQ4ow5R0Ee5J GYfSnVcnmzxOEompgavZDC5q5zYuOaA7ewyR8u4czugFq5AunEA/mAOicWy7 pNKBx3Q2BdxBbWQy2QKvF9eBywSYDSJltnvmLoajg7xKml9ou0Qi1ZW8PVPY 5K1DsWqd5EJECtE24wZE/jwpnk89THcrMMF4GlcI1usPvK9EO7sd/eEDY6zX A/Mo1QKJDh0gn31/K379IYl8i4dwHhmwG4q4xKXX59IjxFv0cmhJ7m7ELtL4 oyxfBBNcjRhyvpjd5P0khtOoUAmGdkNF+9D3IaVoecjLjzSqt1Dxy2JaYDhf ehWZt06l9bu8hBQpaoDtPDisH26V9knXpjyP2r2ZutuuS2VfDmeBw6CiK6DM okjv4Gh1iGIYGysQVkEUi38LpksGGI7g7T7krV8Z51Xz3KXaDj4Cum3i+bTt MKrRQEb4sszuWFFGxt6d812i6KPQZ2Vm6BdCFwOE =FWRp

-----END PGP PUBLIC KEY BLOCK-----

Recognized Security Researchers

  • Muhammed Waqas, Pakistan
  • Tom Cupis, UK
  • Big Theory Ltd, UK
  • Sanjok Karki, Nepal
  • M. Muzammil Saleem, Pakistan
  • Faizan Ahmed, Pakistan
  • Hassan Ahmed, Pakistan
  • Muhammad Arslan Kabeer, Pakistan

For any services or systems that are hosted by third-party providers or Linnworks-owned property, services are physical or intellectual.