Security
Vulnerability Disclosure Programme
How to report a security issue, what happens next, and the good-faith protections offered to researchers.
How to report
Send a detailed private report to security@lexbharat.example (placeholder address). Please do not file public issues.
Contact
Placeholder description for “Contact”.
Please include
Placeholder description for “Please include”.
Scope
In scope: the main website and its subdomains, the web application, the API. Anything else: report privately so it can be routed correctly.
In scope
Placeholder description for “In scope”.
Out of scope
Placeholder description for “Out of scope”.
Rules of engagement
Test only against your own accounts, avoid degrading service, do not access others' data, and stop and report if you encounter personal data.
What to expect from us
1. Acknowledgment, within 72 hours
Placeholder description for “1. Acknowledgment, within 72 hours”.
2. Triage and validation, within 5 business days
Placeholder description for “2. Triage and validation, within 5 business days”.
3. Remediation, severity-dependent
Placeholder description for “3. Remediation, severity-dependent”.
4. Coordinated public disclosure, after the fix ships
Placeholder description for “4. Coordinated public disclosure, after the fix ships”.
Safe harbor
Placeholder text for “Safe harbor”. The real page covers this topic in detail; this recreation keeps only the heading and its position on the page.
Good-faith research is welcomed
Placeholder description for “Good-faith research is welcomed”.
Bug bounty
Placeholder description for “Bug bounty”.