Help us keep Payle secure.

Security is a shared responsibility. If you discover a vulnerability in Payle, we want to hear from you.

Report a vulnerabilityResponsible disclosure · Security researchers welcome

Built for autonomous payments. Designed for controlled access.

Find something? Tell us.

We believe security improves when researchers, developers and companies work together.

If you have discovered a security vulnerability affecting Payle, our infrastructure, our website, our APIs or our products, please report it responsibly. Our security team investigates every valid submission.

What we are looking for

  • Authentication and authorization

    Broken access control, privilege escalation, authentication bypasses.

  • Payments and financial data

    Issues affecting transactions, payment authorization, balances, cards or financial information.

  • API and infrastructure

    API vulnerabilities, server-side issues, exposed credentials, cloud infrastructure vulnerabilities.

  • Privacy and data

    Unauthorized access to personal or sensitive user data.

  • Web and application security

    XSS, CSRF, SSRF, injection, account takeover and other application-level vulnerabilities.

What makes a good report?

A useful report helps us reproduce and understand the issue quickly.

  • Clear description of the vulnerability
  • Affected URL, endpoint or component
  • Steps to reproduce
  • Proof of concept where appropriate
  • Security impact
  • Any relevant screenshots, requests or logs

Please do not access, modify, download or delete data that does not belong to you.

Responsible disclosure

Please give us a reasonable opportunity to investigate and remediate a vulnerability before publicly disclosing it.

Do not intentionally access another user’s account, expose private information, disrupt our services, or perform actions that could cause financial harm.

Never test against real financial transactions or attempt to move funds that are not yours.

Rewards

Eligible vulnerabilities may qualify for a reward based on severity, impact and the quality of the report.

Rewards are determined at Payle’s discretion and may vary depending on the vulnerability and the affected system.

Disclaimers

Payle is not a bank. Payle is a technology company currently in development and is not a bank, lender, broker-dealer, investment adviser, payment institution, money transmitter, or insurance provider. Payle does not currently accept deposits, hold customer funds, issue cards, provide payment accounts, extend credit, execute trades, or provide investment, tax, accounting, or legal advice.

Any financial products or services described on this website are illustrative and may not be available. If Payle launches financial features, they may be offered through appropriately licensed and regulated third-party partners. Those partners, rather than Payle, may be responsible for custody, payments, banking services, lending, brokerage, investing, card issuing, compliance, and customer support. Availability may depend on jurisdiction, eligibility, identity verification, underwriting, partner approval, and applicable laws.

No application, account, card, approval, rate, yield, reward, balance, transaction, insurance coverage, or other financial outcome is guaranteed. Product names, descriptions, pricing, limits, fees, rates, eligibility requirements, partner relationships, and regulatory arrangements may change before launch or may never be offered.

Nothing on this website constitutes financial, investment, lending, tax, accounting, legal, or other professional advice, and nothing creates a fiduciary relationship. Information is provided for general informational purposes only and should not be relied upon as a substitute for advice from a qualified professional who understands your circumstances.

Any future funds, balances, or transactions may be subject to the terms of the relevant provider. Unless expressly stated in final product documentation, funds may not be insured by the FDIC, protected by SIPC, guaranteed by any government agency, or otherwise protected against loss. Investments and other financial products involve risk, including the possible loss of principal.

Third-party names, logos, trademarks, and links are used for identification or informational purposes and do not necessarily imply endorsement, sponsorship, or a current commercial relationship. External providers maintain their own terms, privacy policies, disclosures, security practices, and service availability.

Payle may collect waitlist or contact information before launch, but joining a waitlist does not create an account, guarantee access, establish a customer relationship, or constitute an offer to provide any product or service. Please do not submit sensitive financial information through forms that are not explicitly designated for that purpose.

By using this website, you acknowledge that it is an evolving preview of Payle and that content may be incomplete, inaccurate, or outdated. Please review final agreements and disclosures before making any financial decision or using any future Payle feature.