Responsible Disclosure

If you have found a potential security issue in secureark.in or the SecureGPT Guardian service, we want to hear from you.

How to report

• Message +91 95150 06604 on WhatsApp and describe the issue, or ask for a direct channel for detailed technical write-ups.
• Include enough detail for us to reproduce the problem: affected URL or component, steps, and impact.
• Please do not include other people’s data in your report.

Our commitments

• Acknowledge good-faith reports within 72 hours.
• Keep you informed as we investigate and remediate.
• Credit researchers publicly if they wish, once a fix ships.
• No legal action against researchers who follow this policy and act in good faith.

Ground rules

• Use identified vulnerabilities only to demonstrate the issue — never to access, alter or exfiltrate data.
• Do not degrade service availability (no denial-of-service testing).
• Do not use social engineering against our team, partners or users.
• Give us reasonable time to fix issues before any public disclosure.

Out of scope

Spam, automated scanning noise, missing security headers without demonstrable impact, and reports from automated tools without reproduction steps may not receive a response.