Found a security issue on Creative Market? We want to hear about it! A clear and well written report helps us verify and fix the issue faster.
Security at Creative Market is led by John McNamee, Director of Infrastructure. Reports go directly to our security team.
How to report a security issue
Email your report to security@creativemarket.com. Please don’t use our general support form for security issues.
Include:
- A summary of what the issue is and where it occurred
- Steps for reproduction, including the URLs, parameters and requests involved
- What an attacker could do with this issue
- Screenshots or a screen recording as evidence
Rewards
We reward qualifying reports using a tiered approach based on severity: critical, high, medium and low. Our security team independently assesses each report’s severity before any payment is made, and decides whether action is warranted. We’ll share reward details when you contact us.
To qualify, a report must:
- Be the first report of that issue
- Not be disclosed publicly before we’ve fixed it