We take the security of our platform and our clients seriously. Here is how you can report a security vulnerability or an issue with your personal account.


Reporting a Security Vulnerability

If you are a security researcher who would like to report a vulnerability or bug, we use HackerOne to manage our Vulnerability Disclosure & Bug Bounty Program.

  • Please email security@stitchfix.com with your HackerOne username or associated email address.
  • We'll be glad to invite you to our private program so that you may report your findings there.


Reporting a Personal Account Security Issue

If you're having an issue with the security of your personal Stitch Fix account, please contact our Support team over chat, text or email.