generated: '2026-07-18'
method: searched
probe: true
policy:
- https://www.blackduck.com/company/legal/security-commitments.html
note: 'Black Duck publishes a Security Commitments page describing its security program and directs
  security inquiries and vulnerability reports to a security contact address listed there. No RFC 9116
  /.well-known/security.txt was served (returned 404/301), and no public bug-bounty program (HackerOne
  / Bugcrowd / Intigriti) was located in this pass.'
evidence:
- source: https://www.blackduck.com/company/legal/security-commitments.html
  kind: security-policy-page
  detail: Lists a security contact for vulnerability reporting and inquiries.