Want to report a bug or security vulnerability?
If you’ve found a bug, a security vulnerability, or anything unusual in one of Holland & Barrett’s websites, apps or digital tools, we want to hear from you.
We have a Vulnerability Disclosure Programme that gives you a secure and responsible way to report issues. This is the only accepted channel for submitting bug reports or disclosing security vulnerabilities.
How to report a vulnerability or bug
You can report things like:
- A bug in our app or website
- A potential security vulnerability
- A responsible disclosure
- A weakness or flaw in our digital systems
To share your report, please use our official Vulnerability Disclosure Programme.
Reports must be submitted through this programme to be reviewed by our security team. If you send a report through customer service or email, it won’t reach the right people.
Why responsible disclosure is important
Keeping our systems secure is a top priority at Holland & Barrett. Our Vulnerability Disclosure Programme makes sure we can handle issues safely and quickly. It also gives researchers, ethical hackers and members of the public a clear and respectful way to share what they’ve found.
Using the official process helps us fix problems faster and protect everyone’s data.