Vulnerability disclosure

Found a security problem? We want to know.

Dugzi is run by AskOwlo BV, a Dutch company. This page tells you how to report a security issue, what we ask of you and what we promise in return.

How to report

Email security@dugzi.com with a description of the problem and the steps to reproduce it. We reply within 3 working days.

What we ask of you

• Act in good faith: you report to help us fix the problem, not to exploit it.
• Use only your own accounts or test accounts you create. Never access, change or delete other people's data. If you hit real data by accident, stop, don't keep it and tell us.
• Don't run denial-of-service or spam tests against us or our users.
• Give us a reasonable time to fix the problem before you publish anything about it.

What we promise

• We won't start legal action against good-faith research that follows these rules.
• We'll tell you when the problem is fixed.
• We'll credit you publicly if you'd like that.

Rewards

We don't pay bug bounties at this stage. Reports are still very welcome, and we're happy to credit you.

The same information is also published in our security.txt.