Our Commitment to Security

Security Practices

At AuthDuty, we prioritize the security of our systems and the protection of our clients' data above all else. Our comprehensive security measures include:

Security Assurances

AuthDuty is committed to maintaining the highest standards of security compliance, including:

Security Vulnerability Reporting

We take the security of our systems seriously, and we value the security community. The responsible disclosure of security vulnerabilities helps us ensure the security and privacy of all our users.

Guidelines

Please follow these guidelines when reporting a vulnerability:

  • Provide detailed reports with reproducible steps.
  • If the report includes a proof of concept, please make it non-destructive.
  • Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service.
  • Do not disclose the issue to others until it has been resolved.

Submission Process

To submit a vulnerability report to AuthDuty, please email us at:

[email protected]

We will acknowledge receipt of your report within 24 hours, and we will send a more detailed response within 48 hours indicating the next steps in handling your report. After the initial reply to your report, we will keep you informed of the progress towards a fix and full announcement.

We request that you keep your communication about the vulnerability confidential and refrain from posting or sharing any information about the vulnerability until it has been corrected.

Rewards

Though we currently do not offer a paid bug bounty program, we recognize and show appreciation for security reports that help us keep our services safe for everyone. Contributors of valid reports will be acknowledged if they choose.