Mozilla VPN participates in the Mozilla Client Security Bug Bounty Program. The program is designed to encourage security research into Mozilla's websites and services and to reward those who find unique and original security bugs in Mozilla's products and web services. That website has details on the program, including submission guidelines and program rules.

Bug bounty hunters: Please submit security bug reports for the Mozilla Client Security Bug Bounty Program via Bugzilla. It is recommended that you first read the program's guidelines and FAQ, which are linked above.

Everyone else: Please email security@mozilla.com with the details.