Datasuraksha Security is at the heart of what datasuraksha.com does. If you believe you have found a vulnerability in our Website, please tell us. We will work with you to understand and fix it quickly.
How to report
Email info@datasuraksha.com with:
- a description of the issue and its potential impact;
- the affected URL or component;
- clear steps to reproduce it, with screenshots or a proof-of-concept where possible;
- your name or handle, if you would like to be credited.
Our contact details are also published at /.well-known/security.txt.
Scope
- In scope: datasuraksha.com and its pages and forms.
- Out of scope: denial-of-service or volumetric testing; social engineering or phishing of our staff; physical attacks; third-party services we use (for example, Google or our hosting provider), which you should report to them; findings from automated scanners without a demonstrated impact; missing best-practice headers with no security impact.
Please do
- Give us reasonable time to fix the issue before disclosing it publicly. We suggest 90 days, or sooner once it is fixed.
- Use only your own test accounts and data.
- Stop testing and report to us as soon as you confirm a vulnerability.
Please don’t
- Access, change or delete data that isn’t yours, or keep more data than you need to show the issue.
- Degrade or disrupt the Website, or send spam through our forms.
- Run tests that could harm our users, systems or reputation.
- Demand payment in exchange for withholding details.
Our commitment
- We will acknowledge your report within 3 business days and keep you updated on progress.
- We will not take legal action against you for research carried out in good faith under this policy.
- With your permission, we will publicly thank you once the issue is resolved.
We do not currently run a paid bug bounty programme.