Security

Security at Presta Software is led by Marco Presta, Founder, who is also the company's security lead and the person behind its Blue Team review line and its AI red-team engine.

Report a problem with our systems

Write to marco@prestasoftware.com. Our machine-readable contact is published at /.well-known/security.txt (RFC 9116). We acknowledge within two business days and keep you informed until the issue is closed.

Bug bounty

We run a paid bug-bounty program for the systems we own, open since 1 November 2026: scope, rewards and safe harbour are on the bug bounty page.

How we review systems

Our reviews are passive and outside-in: the ordinary requests a browser makes, at most a handful per site, nothing tested or exploited. We review a system only at its owner's request, recorded before any request is sent, and findings about a system we do not own go to its owner or to the Canadian Centre for Cyber Security's coordinated-disclosure process. Never published, never sold. For businesses, this is the Vitrine service.