Redoubt is a privacy-hardened Android browser built from Firefox's source and LibreWolf's privacy configuration. It is an independent project: please report Redoubt security issues here, not to LibreWolf or Mozilla.

Report privately through GitHub private vulnerability reporting. Please do not open a public issue for a vulnerability.

Also report it privately if a downloaded APK's signing certificate does not match the fingerprint in the README.

Only the latest beta on the Releases page receives fixes.

For the full process (scope, what counts as a Redoubt issue versus a Firefox or Gecko one, and how fixes ship), see docs/android/SECURITY.md.