Linnworks Vulnerability Disclosure Program

Here at Linnworks, we are committed to securing our customers’ data to the highest degree. We understand that trust is important, and we place the highest possible emphasis on both data security and ensuring the best possible service levels.

To protect our user’s privacy and security, Linnworks is happy to accept all vulnerability reports that adhere to our coordinated vulnerability disclosure guidelines.

Once the reported issue is addressed, we will provide the recognition by listing your name on this page. You can use this page as a way to market your skills.

In scope:

• Linnworks.net web application
• Linnworks desktop software
• Virtual printer software

Out of scope:

• Any services or systems that are hosted by third-party providers or Linnworks owned property, services are physical or intellectual

How to submit a security vulnerability.

You can encrypt the content of your email using GPG with the following key and send it to us via email to product-security@linnworks.com.

Learn how to use the Linnworks Product Security PGP Key.

Any information which you may want to send to our Security Team should be encrypted with this key.

As a good security practice, you should validate PGP keys you receive, and not trust keys that cannot be validated. Information on how to validate the Linnworks Product Security PGP Key is available below.

To verify the authenticity of a security notification, compare its key signature with the Linnworks Product Security key documented below.

Do not use Github or any other public channels. We ask that you keep the issue confidential until we have a fix and an announcement ready.

This key will expire on 2nd May 2024

• Key ID: 6F916F680AB5F8F8
• Key Type: RSA
• Expires: 2024-05-02
• Key Size: 4096/4096
• Fingerprint: 1BAE 7051 EE6C 5B0D 06DF 58E6 6F91 6F68 0AB5 F8F8

-----BEGIN PGP PUBLIC KEY BLOCK-----

xsFNBGJvXUwBEACkxjawzTXCgtfkPC8Y6pE3uDHz+x2HhVsE+p06tO4KoLIp
0rPUDOtDyzRndE0GPBOm+wkA54nnCkvMYUbNylT1L/SFDZBvAYcWPQdwfNI9
0D+zOqIoHqrvD7n2o1qoqb8qLDKziqvTjLI+VTMk0RbOle68KdxIsMCDM30b
RI0pOogfmwUjHZD0E0a3qZVwnwQwUy0UsCLV3GXF2OE8cmn4UOF0NsbPnGjP
ZxXC4FyT59wXfbHIwCAM1yeRWL+HRDGPpdWBKryYJLMYzl8/8Zjn4Kh8IHEg
fwjrXne3TVBO6aiT4l+9WcJVQzVMg4ITcI2yMdkYaYHErDO8itmalzUjDham
d5n4iWitmmW+pcYnhR7ndLcL/JW32nUEZAIm2ZlEUmNuXxRrn+9ry6Gd23BM
Mx0Ovql7F1stXRfL0Mjw8NqY+ns1fqUK3qpbUpTN8Kf3sROpH09eJivF5uG9
t/7iXo43E+6d0/3w12pzT3tv7fzSmQhf3/rxISEFl6ZalXkc/d+l7iWKMKKU
4HO4mr4imrLSCHH5ICXAuhjJMwtLIXvywz7Fv/Uiv/IK0rBGkOtjbNQJ65/y
kz6jD+mNYsAlEhgZzcm5H/DJzc4CebJqxdIEALTF4db9wy3hQAweukdi7JvR
3g1vo1VngNeg/rTQRLytfCuxnawjlwQ+ARbSTwARAQABzSpUZWFtIFNlY3Vy
aXR5IDx0ZWFtc2VjdXJpdHlAbGlubndvcmtzLmNvbT7CwXUEEAEIAB8FAmJv
XUwGCwkHCAMCBBUICgIDFgIBAhkBAhsDAh4BAAoJEG+Rb2gKtfj4fYEP/jWG
uF1fZQ+0FTDfH/dM6nIjbe5gu2n8a3ivajAxIBPTn1RFgL8ksvI5VCRt7r+2
EasMvLbH9ATcRLO8ikf7/Veg1JigsVuCqhzR2f9Oh2pwkLDM7BW+WV5VssyO
Vm0oISuxohYpO6uxRDkyIziGkX/bcvPq89r3JRTH8ixPTeC7/dnrVJQMp2l+
w4tODfGHA1XECcmZ47Ckj8k7nJ3Q+CZCDueINVggz7DY0NVANCrzis7mbOlX
fEg1f9r3wFcX/0XQM2WlnASgyUH2vONe40zULbTembhonJlz3/zCqqYcr6ru
7aN+Yd5qxEMyffRb44u/qTGEnGHTlFIkoS0IJFIlQIKGeBD0XGcFL0waZujn
j50HFtScjqbZ/3rXSW+coAaBi9XOBrTYAdD/SnT2Ba9MGL0skn8VglfmAYz5
O5Ad1DRLI1JXx5J/8ZtKgFA7l8yX0XRNMJ18WtmnT3HM6gtOSCF1G9lhkfmE
iF/r481iGjhkz6Qgzrd5WaZE1PmvljLV/6q4tfL34Az0c8Wb9N9T8X8Nnn9t
sdhir5IUhbN36LJILExffct0ZdESM+aCkX3iPZ39wpENqo8kwyle2nhWZd3z
fFICiHgUfsuUOmEbmKg7Aklazh5GS30r9gECCS1n2Z2nubW2SoX6BlbsR75D
b2WdYHCX9MGsOJfxqBzPwsF7BBABCAAlBQJib168BQkDwzPkBgsJBwgDAgQV
CAoCAxYCAQIZAQIbAwIeAQAKCRBvkW9oCrX4+HcVD/4t/LpnAc23ONobd8xz
I7safh52Lvb7wGm97Ajcw4BR6qSDDyiK4VP/Ps0SVu5yV7nFIVZ97ecbgaY5
TyXOR3R1+PbtudtDGHCfBCVm25CqzoDlBFK/FPjYpS9IAlh5i4YZu0GkDH6N
kzI0sC7EMQvLEdNJFb5IZmNJPwGQHZv1Gygmm8bIcQUnq3B2Fs2D60Xb/Ooc
agyppnOYLsUNYq6V3ijckhp+Lca/at794VzKsb0PM2uuEnVm7iWV4IlAcSrI
MQ3GK6tuQ6uqVvXi2f6ksEWm9o6c1myRXTwFMuhxrBrbnJT5oYTvD7liByMa
YCO4fLalxrOFPyzC0Vek8BmYaNMSCda3V1bBqxqWUAu6Af5Jn1+C/mx3MyzI
YxQ9KF4kTB5WGLqlyjyAfxStvUfYrqVY0dlqGy9k+nxdmcmKCXt/cONqx23H
62BLjcvdyJStkmzMHx3g0lIGJnxqw4boRvWAb091cQYjp6EuAVU3Ouc3twTy
2ktIDdZGuNmFdwUTKbMknvDI3okeVjtuuU56xAGqwJsOs62zOk+m4CgzmcDZ
YxNF4zAcKiXTtceiS/n3GtIBCty/QDWZQkP08wGnHy1Nkuwfo0YQ9m4kbHVM
vQWwZkFmFvsRTCwIsfsQ1CPzmSQ4NX5ocyUmRAAtsPAangihs0VDFwB83kDW
VnGzx87BTQRib11MARAAnxt8IEaGfzwCwy2UnOcn0ddgPYMGlJB+NRpwAiaP
I7+dempjg23QI2HYgkFKxcNtW9xv9g3basmdIpF9WNPE46X/8hNZFmOmVYUq
NjIk3Ng+LXfbAnHKllRrtic3fMNGNVnwhQVUbtefK0OIyQQ3Isg3YYXL4Dnb
tRnalycUlV2zdHlcHUduS7pTfzJFJiKxWlxFSpMNwXQ2grWW/ILOxN+fe3O3
AlsJuhG7kppUgq7u2d4YIzDgsP+vbdJqaNPwQngfaLasgUHPyr261XYRJq7I
/QyWRiUSWUlhjWAHdxaCCLjksMV+pMy1aHa1tVtGE5Pg3A/wdSYTaCxEDG8O
NNefcrfb9vlLDh/vgZc3iaJdqLb/FDhaRbtc3Ci0MdzaSxV4xkbUrkvPBDs/
D3G9JIKuElyhK8qe6lt9L/O9NjmExL4FB/eI05xnIAARILbNBMMcRNNMZhnc
hvC6bYV4LYNuMqxUreq5ofprWHkH8mJTeVRGRDervU3swPHdyxf5geATbkxB
DC8v6k1kGTVGxUADHdsCy3VnijKvZZy9AKOeSDITgAInqWcaEwA/ZDIkQu2j
gW6+Dwld4+Bxpen2bt7r2xnfM80cHMkkpUQshhTVmSVcZ/hYbHYMgTVolgu9
c72HufKY/Vz+Kg7vo4/yCkb+YrTXEifkJHRBx4TMPGUAEQEAAcLBZQQYAQgA
DwUCYm9evgUJA8Mz5AIbDAAKCRBvkW9oCrX4+IynD/9O1SbwFxoUOjtETsny
u+SQVyRfnClULcCZ/aMML1eyfmdKlg2DfP/tvBWXzpGM+c7x5NwjdNGGGumL
aHBMPKaUucWrhk1ruVMTNUikAsJ3LI4iG1HLQDGMYLhd9X0Hmq6CfLzRvIqy
l1sD/te/5PQrAfOr7DUp3alcmH4GiXm1P1Ge+BKY+ZmQR8Cw18KBdtOWF5XB
+9yTXhKFiuCBZ6GiZXJGbRa6m5tz4py0875kAo85GfUCQXLTHmIGbbcSH7yp
fOcOBB9StZJc48dMbbEDbK1H6qlFVYFyV+8Qe+obJxriTRBaI449CwZxtUuQ
Bb+alZ6YSlKMDBNQeo00myPknMuCRBvs/K3suOHi1DR/dbRyN+0Vchm0WBt+
aLlZDfzhDvzbjk4mIz1Kg+S3i9f82nE0GratM6/BA2c/Fuj4OYPJsQCrwDNc
UjKMxhyXOffbqCfvSHzNcZnTXGB+KgJmtj4C00d5InkvzL3opfPhXVAWW8/s
zkOfP20qSgcRQdAYNYEqsekCTKFFASqz6bZ/0umUjWEHB/wwKDAAgD7y8z2K
W3oOaStUr2kUmKqBRFPQ8euSLdIeF18j3fsmAgxPkVxlZAOF9njg6QKsG0xV
HkoFsdFFc50E/63vTc/y8PLrpSLyRu0XYEJzMvOSVvsQccY+y6VJLG0ccqh3
kh46qg==
=oqiP

-----END PGP PUBLIC KEY BLOCK-----

Any services or systems that are hosted by third-party providers or Linnworks owned property, services are physical or intellectual.