Responsible Disclosure

DigitalAnanth considers the security of the site very important. Despite my concern for the security of this site, it is possible that a weak spot is or has arisen.

Have you found a weak spot in the Digitalananth.com site? For example, did you accidentally encounter it during the normal use of this site? Or did you explicitly go out of your way to find a weakness? Let us know so that I can take measures as soon as possible.

This is not an invitation to extensively scan and test my site to find weak spots. I’ll do that myself.

I are happy to work with you to better protect the security of my site.

I ask you:

Email your findings as soon as possible to hello@digitalananth.com.
Provide enough information to reproduce the problem so that I can resolve it as quickly as possible. usually the IP address or URL, a description of the vulnerability is sufficient, but more complex vulnerabilities may require more information.
Not conduct tests that exploit physical security, social engineering, or third-party application attacks.
No brute force or denial of service to perform.
Not to abuse the weakness by, for example, changing or deleting data or installing malware. I always take your report seriously and will investigate any suspicion of a vulnerability.
Also, don’t share the problem with others until I fix it.
Not to copy data from my systems other than absolutely necessary to demonstrate the breach.
Leave contact details (email and telephone number) so that I can contact you to work together on a safe result.

I promise:

To respond to your report within three working days with the assessment of the report and an expected date for a resolution.
Treat your report confidentially: I will not share your personal information without your consent. An exception to this is the police and judicial authorities, in the event of a report or if data is demanded.
Keep you informed of the progress of resolving the problem.
You may include your name as the discoverer in communications regarding the reported issue, if you wish.
That a chance discovery in my online environment will not lead to a report against you. As long as you adhere to the rules and behave in the spirit of responsible disclosure, I will not press charges against you.

As a thank you for your help, I offer a reward for every report of a security problem that is unknown to me. I determine the size of the reward based on the severity of the leak and the quality of the report, up to a maximum amount of 3000 Rupees in gift vouchers.