Toast is the all-in-one digital technology platform built specifically for the restaurant community. We serve a diverse range of customers—from distinct local cafes to nationwide enterprise chains—powering front-of-house operations, back-of-house management, and guest-facing technology. Our platform combines powerful cloud-based software with durable hardware to help restaurants operate efficiently, delight guests, and thrive in a digital-first world. What do we do? We provide a comprehensive operating system for restaurants. The Toast platform unites Point of Sale (POS), Kitchen Display Systems (KDS), Online Ordering, and Team Management into a single, streamlined ecosystem. Beyond secure payment processing, we handle critical workflows including inventory management, payroll, loyalty programs, and third-party delivery integrations. We help restaurateurs streamline their operations, grow their business, and deliver a seamless dining experience to guests everywhere. Intention for this program To partner with the global security research community in identifying and addressing potential vulnerabilities across Toast’s hardware, software, and cloud infrastructure. Security is a priority for the Toast ecosystem given its role in daily restaurant operations. Your responsible disclosure helps us validate our defenses and ensures a reliable, secure experience for the merchants and guests who utilize our services. The targets listed below are publicly accessible, but we do not provide accounts for accessing authenticated functions. If you can create self-register for any application, feel free to do so using your Intigriti email (intigriti.me). If account creation requires a phone number, please include a reference to Intigriti in your profile, such as using 'intigriti-<name>' in the first name field or something similar.
This is a responsible disclosure program without bounties.
Security is at the heart of how we serve our community. We strongly encourage collaboration with security experts to help keep our ecosystem safe. Our disclosure policy ensures that researchers have a clear, protected avenue to flag potential issues so we can address them together.
Feedback
Would you like to help us improve our program or have some feedback to share, please send your anonymous feedback here:
Program feedback link
Please note this form will be checked periodically and should not be used for submission or support queries.
This program follows Intigriti's triage standards based on the proof of concept.
You can self-register for some of the applications, but please be sure to use your @intigriti.me address.
For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.
It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.
