generated: '2026-07-17'
method: searched
probe: true
source: https://doku.com/.well-known/security.txt (probe) + developer/security docs
securityTxt:
  present: false
  probedUrl: https://doku.com/.well-known/security.txt
  httpStatus: 301
  note: No security.txt is served; the well-known path redirects and does not return a policy.
disclosureProgram:
  found: false
  note: >-
    No public vulnerability disclosure program, bug-bounty, or responsible-
    disclosure policy was found on doku.com, developers.doku.com, or
    docs.doku.com as of the review date. DOKU maintains PCI DSS Level 1 and
    ISO/IEC 27001 controls but does not publish a coordinated-disclosure
    channel or a security.txt contact.
contact:
- type: general-support
  url: https://www.doku.com/en-us/contact-us
  note: General/merchant support contact; no dedicated security reporting address is published.
evidence:
- source: https://doku.com/.well-known/security.txt
  kind: security.txt (live probe, HTTP 301, no policy returned)
- source: https://docs.doku.com/security/licenses
  kind: security/licenses page (certifications only, no VDP)