Buffer

Buffer
The platform that powers our solutions
Buffer
The platform that powers our solutions
Buffer
Resources for amazing social media marketers
Buffer
Resources for amazing social media marketers

Security at Buffer

If you discover a security vulnerability in any of our services, we'd love to hear from you.

Report an Issue

Reporting an issue

We know how much work goes in to pen testing! To avoid frustration, you can check out these common non-vulnerabilities that don't qualify for rewards.

Got a valid issue? Awesome! Please include:

GPG Encryption

If you plan to provide access tokens, secure cookies or sensitive data as an example, we kindly ask you GPG encrypt your email. Here is our public GPG key.

Rewards

We're eternally grateful for all of those who put in hard work to identify weaknesses within Buffer. For reports that are not common non-vulnerabilities, we like to reward those who responsibly disclose vulnerabilities with an acknowledgement, swag or bounty money.

Acknowledgements

We appreciate the work that goes into finding and disclosing security flaws in Buffer and would like to thank the following individuals and organizations: