Responsible Disclosure

Glossier values the work done by security researchers to improve the security of our websites and services. Our disclosure program is our way to work with this community to verify serious vulnerabilities discovered by security researchers. While we can’t offer any cash rewards at this time, we would be happy to ship you some Glossier goods as a reward for reports that are novel and significantly impact Glossier’s security standing, as determined by our security team. 

Please note that, in some rare cases, we may not be able to ship to your country.  

Participation

Please report any vulnerabilities to Glossier's security team by emailing disclosure@glossier.com.