Bug bounty program & security policies

With enterprise-grade bug bounty programs and security policies, our users can feel confident using Elementor products.

Our approach to rapid remediation

Security is built into the fabric of our cloud products, infrastructure, and processes, so you can always be confident that your data is safe.

We provide multi-factor authentication, regular security software updates and strict enforcement of access patterns.

We employ several layers of advanced monitoring tools including real-time cloud detection and protection services.

Professional security teams are on-call around the clock to rapidly address and report any threats.

Our DDoS and WAF safeguards block malicious traffic and prevent fraudulent flooding of large amounts of traffic.

Elementor manages two bug bounty programs to cover our security needs: Patchstack for any WordPress plugin issues; Bugcrowd for all other concerns.

Patchstack is a recognized WordPress-focused bug bounty program.

Bugcrowd is a crowdsourced security platform for vulnerability disclosure.

If you are unsure about where to submit your issue, please contact us at security@elementor.com.

Elementor has several industry certifications including ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, and SOC 2 Type II, PCI.

Elementor adheres to a Secure System Development Lifecycle based on industry best practices to ensure high-quality, secure code.

Operations and security teams are on-call around the clock to monitor, address, and prevent potential risks.

Acknowledging that all code has bugs, Elementor remains committed to identifying and fixing bugs in a timely manner.

Elementor promotes a continuous integration process mindset, requiring plugin users to be active participants in regular updates.

With an enterprise-grade security and continuous integration SaaS mindset, Elementor upholds its commitment to user safety and reliable services.