The Matomo Security Bug Bounty Program on HackerOne is designed to encourage security research in Matomo software and to reward those who help us create the safest web analytics platform.

We encourage you to responsibly report issues via our Matomo Bug Bounty Program on HackerOne or you can also email us at security@matomo.org.

If you have found a security issue in Matomo please read our security notes regarding responsible disclosures.