Responsible disclosure

What this covers

If you believe you have found a security weakness in this website, we want to hear about it. This page covers the website at cybrilliant.in and its subdomains that we run. It does not cover systems run by our clients, partners or suppliers, or third-party services we link to. Report those to their owners.

How to report

Email contact@cybrilliant.in with the subject “Security report”. Include:

• where you found it (page or address);
• what you did and what happened, with steps we can repeat;
• the effect you think it has;
• how to reach you, if you want a reply.

Do not include real personal data, passwords or access keys in the report. If you need an encrypted channel, ask in your first message and we will arrange one.

Ground rules

Please:

• test only against this website, and stop as soon as you confirm the issue;
• do not access, change, copy or delete data that is not yours, and do not go beyond what you need to show the problem;
• do not disrupt the service, including with denial-of-service tests, or use social engineering, phishing or physical attacks against our people or suppliers;
• do not run automated scanners at a volume that affects the site;
• keep the details private until we have fixed the issue or agreed a date to share it;
• follow the laws that apply to you.

What we will do

• Acknowledge your report within five business days.
• Look into it, tell you what we find, and keep you informed.
• Fix confirmed issues as fast as we reasonably can, based on risk.
• Credit you if you want, once the issue is fixed.
• Treat your report and contact details as confidential.

Legal note

We will not start legal action against anyone who finds and reports an issue in good faith and follows these rules. This is our own commitment. It does not bind other organizations or public authorities, and it does not change how UAE law, including the cybercrime law, applies to your actions. If in doubt, ask us before you test.

We do not run a paid bounty program. Reporting does not create any right to payment.

Related pages

See also our Privacy notice and Terms of use.