Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 19 Sep 2026.

Just Eat Takeaway.com values the security of its customers, partners and employees. We invite security researchers to test our public-facing defenses, helping us strengthen our platform. Ratings and rewards: We follow the Bugcrowd Vulnerability Rating Taxonomy for the initial classification of reported issues. This means certain vulnerability types have a capped to maximum level of severity. We may adjust prioritization based on real-world likelihood and business impact to JustEatTakeaway.com ’s platform. Submissions based purely on automated scanning output are generally not accepted unless they uncover a clearly significant issue. If a submission is reprioritized or downgraded, we will provide a detailed explanation and invite the researcher to appeal with further evidence or reasoning. Focus areas: We prioritize actionable vulnerabilities with direct business or operational impact: account takeovers, payment bypasses, customer data disclosure, authentication bypasses, and impactful business logic flaws. Reports must demonstrate clear exploitability, and findings without proper impact explanation may be considered bugs rather than security issues.