Bitwarden Marketing Website Security Report

This document is a security report prepared by Bitwarden, Inc., detailing the findings from a cybersecurity audit conducted by Paragon Initiative Enterprises (PIE) on the Bitwarden marketing website. The audit took place over three business days in December 2024 and aimed to assess the security posture of the website. The report outlines six identified issues, of which four were resolved following the assessment, while two were accepted as acceptable risks. The issues addressed include cryptography implementation concerns, the use of Sub-Resource Integrity for externally hosted assets, and the need for proper sanitization of HTML content. The report also includes recommendations for improving security practices, such as ensuring appropriate use of security headers and preventing the installation of insecure Composer packages. The findings section from PIE's report has been attached for transparency, providing a comprehensive view of the vulnerabilities and the steps taken to mitigate them.