Security policy

We take the security of our systems and users seriously. If you have discovered a security vulnerability on any DrukArmy service, we encourage you to report it to us responsibly.

Reporting

Please send reports to [email protected] and, if possible, encrypt your message using our PGP key.

Include:

• A clear description of the issue
• Steps to reproduce
• Any proof-of-concept code or screenshots

What to Expect

We will:

• Acknowledge your report within 7 days
• Investigate and address the issue as quickly as possible
• Keep you informed of progress

Rules of Engagement

Things to keep in mind:

• No data destruction or service disruption
• No privacy violations beyond what is necessary to prove the issue
• Use only your own accounts for testing (no unauthorized access to real user data)

Rewards

At this time, DrukArmy does not offer monetary rewards or bug bounties. However, we may recognize researchers on our Acknowledgments page.

Thank you for helping us keep DrukArmy safe for everyone.