Vulnerability Disclosure

Report security vulnerabilities in LUKAN products or services to security@lukan.dk. We confirm receipt within 3 business days, keep you informed of progress, and aim to fix and coordinate disclosure with you within 90 days. We take no legal action against good-faith security research, and we credit reporters who wish to be named.

Anything we make or run: the Detectra inspection crawler, the Fenestra portal (portal.lukan.dk), and this website. If in doubt, report it anyway.

LUKAN follows the EU Cyber Resilience Act: security incidents and actively exploited vulnerabilities are reported to the authorities on the deadlines the law sets, affected customers are informed directly, and security fixes are released free of charge. A machine-readable version of this policy is at /.well-known/security.txt.