SECURITY POLICY FOR DUCO TECHNOLOGY LIMITED
Reporting Security Vulnerabilities
We at Duco take security seriously and welcome the responsible disclosure of security vulnerabilities. If you believe you’ve discovered a security vulnerability in any of our products, services, or systems, we encourage you to disclose it to us in a responsible manner.
Reporting Process
To report a security vulnerability, please contact us via email at security@du.co. When reporting the issue, please provide us with sufficient details to understand and reproduce the vulnerability, including:
- Description of the vulnerability
- Steps to reproduce the vulnerability
- Any relevant supporting material (e.g., screenshots, proof-of-concept code)
- Your contact information for further communication
Scope
This security policy applies to all products, services, and systems provided by Duco group companies. It covers security vulnerabilities that could compromise the confidentiality, integrity, or availability of our systems or the data they process.
Legal
We will not pursue legal action against security researchers who act in good faith to identify and report security vulnerabilities according to this policy. However, we reserve the right to take appropriate legal enforcement action against those who engage in malicious activities or violate applicable laws.
Acknowledgment
We appreciate the contributions of security researchers who help us improve the security of our products and services. With the permission of the reporter, we may acknowledge their efforts publicly once the reported vulnerability has been resolved.
Contact Information
For security-related inquiries or to report a vulnerability, please contact us at:
Email: security@du.co
Please do not use this email address for general inquiries or support requests. It is intended solely for security-related communication.
Revision History
- Version 1.0: Initial release (March 15, 2024)