Introduction

Squarespace is committed to maintaining a strong security posture. We encourage security professionals to practice responsible disclosure and let us know right away if a vulnerability is discovered. We will investigate all legitimate reports and follow up if more details are required. Prior to reporting a vulnerability, please follow our Responsible Disclosure Guidelines and Submission Criteria outlined below.

Responsible Disclosure Guidelines

While Squarespace highly values contributions and disclosures from the security researcher community, it is important that these disclosures are submitted responsibly. With this in mind and in a constant effort to protect our customers, please:

Submission Criteria

In-scope:

Out-of-scope:

Reporting a potential vulnerability workflow

Enter a valid PGP key to continue

Email us at using the key below.

Squarespace PGP Public Key

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=J0TH
-----END PGP PUBLIC KEY BLOCK-----