Black Duck · Vulnerability Disclosure

Black Duck Vulnerability Disclosure

Vulnerability disclosure

Black Duck runs a coordinated vulnerability disclosure program on Hackerone.

CompanyEnterpriseApplication SecuritySoftware Composition AnalysisSASTDASTOpen Source SecurityDevSecOpsVulnerability Management
Program: Hackerone

Disclosure Policy

Policy
https://www.blackduck.com/company/legal/security-commitments.html

Security Contact

Source

Vulnerability Disclosure

black-duck-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-18'
method: searched
probe: true
policy:
- https://www.blackduck.com/company/legal/security-commitments.html
note: 'Black Duck publishes a Security Commitments page describing its security program and directs
  security inquiries and vulnerability reports to a security contact address listed there. No RFC 9116
  /.well-known/security.txt was served (returned 404/301), and no public bug-bounty program (HackerOne
  / Bugcrowd / Intigriti) was located in this pass.'
evidence:
- source: https://www.blackduck.com/company/legal/security-commitments.html
  kind: security-policy-page
  detail: Lists a security contact for vulnerability reporting and inquiries.