We recommend always running the latest version of Lonkero.

We take security seriously. If you discover a vulnerability in Lonkero, we appreciate responsible disclosure.

Email: info@bountyy.fi

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested fixes (optional)

• Initial Response: Within 48 hours
• Status Update: Within 7 days
• Resolution Timeline: Depends on severity, typically 30-90 days

In Scope:

• Lonkero core scanner
• Built-in attack modules
• Configuration handling
• Output/reporting functionality

Out of Scope:

• Issues in third-party dependencies (report upstream)
• Social engineering attacks
• Denial of service against the tool itself

Lonkero is a security testing tool. By design, it performs potentially intrusive operations against web applications.

Important:

• Only scan targets you own or have explicit authorization to test
• Understand your local laws regarding security testing
• We are not responsible for misuse of this tool

We appreciate the security research community. Researchers who report valid vulnerabilities will be acknowledged here (with permission).

This policy follows responsible disclosure best practices.