LEGAL / LAST UPDATED 2026-11-01

Responsible Disclosure Policy

How to report a vulnerability to us, and what to expect from us in return.

1. Scope

Pollosoft is fictional, so there is nothing to attack. But we pretend, and our policy for pretend vulnerabilities is excellent.

2. How to report

Send details of the issue, steps to reproduce, and any proof of concept to our security contact. Please do not include actual exploits for real systems.

3. Our promise

We acknowledge reports within 24 hours, keep you updated, and credit you if you wish. We will not take legal action against good-faith researchers.

4. What we ask

Give us a reasonable time to fix the problem before you publish. Do not access data that is not yours. Do not harm users.

5. Rewards

We offer a thank-you egg for valid reports. Significant findings receive a golden one.

ReminderPollosoft is fictional. This page is a parody and is not legal advice, a contract, or a promise from a real company.