Lingokids · Vulnerability Disclosure

Lingokids Vulnerability Disclosure

Vulnerability disclosure

Lingokids runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyConsumerEducationEdTechChildrenLanguage LearningMobile AppsSpain
Program: Hackerone security.txt present

Disclosure Policy

Security Contact

Contact
mailto:security@lingokids.com

Source

Vulnerability Disclosure

lingokids-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-19'
method: searched
probe: true
source: well-known/lingokids-security.txt
security_txt: https://lingokids.com/.well-known/security.txt
contact:
- mailto:security@lingokids.com
expires: '2036-01-10T00:00:00.000Z'
preferred_languages:
- en
- es
policy: []
bug_bounty: null
evidence:
- source: well-known/lingokids-security.txt
  kind: security.txt (previously harvested)
- source: https://lingokids.com/.well-known/security.txt
  kind: security.txt (live, HTTP 200, text/plain)
- source: https://api.lingokids.com/.well-known/security.txt
  kind: security.txt (live, HTTP 200)
- source: https://app.lingokids.com/.well-known/security.txt
  kind: security.txt (live, HTTP 200)
notes: >-
  Lingokids publishes a valid RFC 9116 security.txt from the apex, api and app
  hosts naming security@lingokids.com. It declares no Policy: URL and no public
  bug bounty program (no HackerOne / Bugcrowd / Intigriti presence found), and
  /security, /responsible-disclosure and /vulnerability-disclosure all return
  404. Separately, the privacy policy names dpo@lingokids.com as the Data
  Protection Officer contact.