Contact: mailto:security@duckling.io
Contact: mailto:lawrence@duckling.io
Expires: 2027-06-05T09:01:33.511Z
Preferred-Languages: en
Canonical: https://duckling.io/.well-known/security.txt
Policy: https://duckling.io/security

# Reporting
# We respond to responsible-disclosure reports within 2 business days.
# Please include reproduction steps, affected URL(s), and the impact you believe
# the issue carries. We do not currently run a paid bug bounty programme but we
# credit reporters publicly with permission.