Security page contact says founder@tryrubbedduck.com. Sure, it's a typo, but that kind of thing matters when you are asking people to upload binaries.