Report Security Issues

Keeping our customers’ information safe matters to us. If you believe you have found a security vulnerability on benzow.com, or you have received a suspicious message that claims to come from Benzow, please let us know.

How to report a vulnerability

E-mail info@benzow.com with the subject line “Security report” and include:

• a description of the issue and where it occurs (the page or URL);
• the steps needed to reproduce it;
• the potential impact, as you understand it;
• how we can contact you for follow-up questions.

We aim to acknowledge every report within 24 hours, keep you updated while we investigate and let you know when the issue is fixed.

Please act in good faith

• Only test against your own account and data; do not access, change or delete other customers’ information.
• Do not run denial-of-service tests, spam, or automated scans that could disrupt the website.
• Do not use social engineering, phishing or physical attacks against our staff or partners.
• Give us reasonable time to fix the issue before sharing any details publicly.

We will not pursue action against anyone who reports an issue in good faith and follows these guidelines. We do not currently run a paid bug bounty programme.

Suspicious messages and phishing

Benzow will never ask you to send your full card number, security code, password or one-time passcode by e-mail, phone, text or social media. If you receive a message like this, please do not reply or click any links – forward it to us so we can warn other customers.

Payment security

Card and wallet payments are processed by our PCI-compliant payment provider over an encrypted connection. Benzow does not store your full card details. See our Privacy Policy for how we protect personal data.