Report a Security Vulnerability

Our Policy

Paychex encourages researchers to share with our team the details of any suspected vulnerability by submitting the form below. By clicking "Report Vulnerability", you acknowledge you have read, understand, and agree to the guidelines described in this policy for the conduct of security research and disclosure of potential vulnerabilities. Paychex will not take legal action against individuals who discover and report vulnerabilities provided they adhere to these guidelines.

Any information you receive or collect about Paychex, its clients, or their employees during the discovery of a suspected vulnerability must be kept confidential and only used in connection with the Responsible Disclosure Policy. You may not use, disclose, or distribute any such confidential information, including, but not limited to, information regarding your submission and information you obtain when researching Paychex sites, without prior written consent from Paychex.