Security

Vulnerability Reporting 

At Criteo we take all security issues and disclosures very seriously. Any information such as the way to reproduce, the tools used with their version and the output, help us investigate and will be greatly appreciated. 

Would you need to report a vulnerability in our products or websites, please e-mail  security@criteo.com. We will keep you posted on each change during the mitigation and long-term fix process. 

Bug bounty 

Criteo is running a selective bug bounty program that is subject to rewards when vulnerabilities in the scope of the program are detected and confirmed. Please contact us at security@criteo.com if you’re willing to join the program. 

Secure Communication 

If you would like to secure your communications with us, the following PGP key can be used.

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=3zhk
-----END PGP PUBLIC KEY BLOCK-----