We are a security company and we hold ourselves to the standards we recommend. If you believe you have found a vulnerability in one of our systems, we want to hear from you.
How to Report
E-mail hello@trojanbyte.com with a short summary. We will reply with a secure channel for technical details. Please do not include exploit code or personal data in your first message. Our machine-readable contact details are published at /.well-known/security.txt when available.
Scope
- This website and its console.
- Other systems clearly operated by TrojanByte Labs Private Limited.
Third-party services, and websites of organisations taking part in the Making Digital Bharat Surakshit initiative, are out of scope.
Rules of Engagement
- Do not access, change or delete data that does not belong to you. Stop and report as soon as you confirm an issue.
- Do not run denial-of-service, spam, social engineering or physical attacks.
- Do not use automated scanners that generate heavy traffic.
- Give us reasonable time to fix the issue before sharing it publicly.
Our Commitment
- We will acknowledge your report and keep you informed about our progress.
- We will not pursue legal action against research carried out in good faith within this policy.
- With your permission, we are happy to credit you once the issue is resolved.