At Wonder, protecting the security and privacy of our customers, couriers, restaurant partners, and employees is a top priority. We value the security community’s efforts to responsibly identify and report potential vulnerabilities affecting our products and services.
How to Report a Vulnerability
If you believe you have discovered a security vulnerability affecting Wonder, please report it directly to our Cybersecurity team:
Email: security-report@grubhub.com
Subject: Wonder Security Vulnerability Report
Please include the following information whenever possible:
- Summary: A brief overview of the suspected vulnerability.
- Detailed description: An explanation of the issue and the conditions under which it occurs.
- Steps to reproduce: Clear, step-by-step instructions that allow our team to reproduce the issue.
- Affected location: The URL, application, service, API endpoint, or other component where the issue was identified.
- Security impact: A description of how the vulnerability could affect Wonder or its users.
- Supporting information: Relevant screenshots, logs, proof-of-concept materials, or other evidence that may help us understand and validate the issue.
- Contact information: Your preferred method for our team to contact you if additional information is needed.
Please do not include unnecessary personal, confidential, or sensitive information in your report.
What Happens After You Report an Issue
Our Cybersecurity team will review the submitted information and may contact you for clarification or additional technical details. We ask that you allow us a reasonable amount of time to investigate and address the issue before publicly disclosing it.
You should expect to receive follow up on the outcome of your submission within a 14 day period.
Thank you for helping us protect Wonder and the people who use our services.