Work at Acorns Grow, Inc.? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
Reviews
0 publishedNo reviews yet.
Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 19 Sep 2026.
Our mission is to look after the financial best interests of the up-and-coming, so we build tools that make investing, saving and earning money easy. Because growing wealth shouldn’t just be for the few. We promise our more than 3,000,000 customers serious security. Thank you for helping us stand by that promise by exposing our vulnerabilities, so that anyone can have a chance at a brighter future. Our Acorns Security Analysts are committed to helping our researchers be successful in our program! We are determined to work with you to understand and attempt to resolve the issue quickly (confirming the report within 2 days of submission). Ratings/Rewards For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.
Scope
9 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| *.acorns.com/ | website | ✓ bounty | not set |
| Acorns for Android | other | ✓ bounty | not set |
| Acorns for iOS | other | ✓ bounty | not set |
| https://graphql.acorns.com | api | ✓ bounty | not set |
| https://www.gohenry.com/ | website | ✓ bounty | not set |
Show all 9 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| https://www.pixpay.fr/ | website | ✓ bounty | not set |
| grow.acorns.com | website | out | not set |
| share.acorns.com | website | out | not set |
| store.acorns.com | website | out | not set |