Report a security vulnerability

How Intuit Protects You

At Intuit, we value our relationship with you and place the highest importance on respecting and protecting you and your data. We want you to feel comfortable and confident when using our products, services and with entrusting your personal, company and financial information to us.

 

How You Can Report Security Issues

For Customers

If you are an Intuit customer and wish to report a suspicious email, website, suspected fraud, or a general security problem with an Intuit product or with your Intuit account, please reference the main security issue reporting page or reach out directly to our security team at security@intuit.com.

For Security Researchers

If you are a professional security researcher and believe you have discovered a vulnerability in an Intuit product, please send us an email at researcher@intuit.com and include the information below:

  • Name
  • Preferred contact information
  • Issue type (e.g. authentication, cross-site scripting, SQL injection, etc.)
  • Detailed description of the issue
  • Detailed steps to reproduce the issue
  • Full proof of concept demonstrating exploitability

 

Acknowledgements

We thank everyone for their contributions, and we publicly acknowledge and thank members of our community on our Security Researcher Acknowledgement Page. We will contact you once the vulnerability you've reported has been resolved to ask you whether you would like your name to be displayed on this page.