SECURITY

REPORTING AND SCOPE

Scope

The security reporting scope includes the public website deckdefender.org and the iOS app Deck Defender.

How to Report

Please include a clear description, affected URL or app version, reproduction steps, expected impact and any safe proof of concept. English and Spanish reports are accepted.

Responsible Testing

Please do not attempt destructive testing, denial-of-service, social engineering, credential attacks, data exfiltration or access to accounts or systems that are not yours.

Response

Reports made in good faith will be reviewed in a reasonable timeframe. Security fixes will be prioritized based on severity and practical impact.

Automated Policy

The machine-readable policy is available at /.well-known/security.txt.