Security is our top priority. We reward security researchers who help us identify vulnerabilities and keep DDownload safe for all users.
Note: Final reward amounts are at the discretion of our security team, based on exploitability, impact and report quality. Duplicate reports are not eligible for rewards.
Identify a potential security vulnerability within our scope.
Create a detailed report with reproduction steps and proof of concept.
Send your report by email to our security team.
After verification you receive your reward and optional public credit.
Response time: We aim to acknowledge all reports within 48 hours and provide a first assessment within 5 business days. Critical vulnerabilities are prioritised.
Safe Harbor: We will not take legal action against researchers who follow these guidelines and act in good faith. Security research conducted under this policy is considered authorised testing.
Send your detailed security report to our security team. We respond within 48 hours.
[email protected]Please write "Bug Bounty" in the subject line and encrypt sensitive information with our PGP key where possible.