Security Policy

XPLOREDATUM's comprehensive approach to cybersecurity, vulnerability disclosure, and responsible security research framework.

Provided by XPLOREDATUM TECHNOLOGIES LLP

Security Contact

Primary Contact

security@xploredatum.com

For urgent security vulnerabilities and incidents

Alternative Contact

https://xploredatum.com/contact

General inquiries and non-urgent security matters

Responsible Disclosure Policy

What We Encourage

  • • Responsible vulnerability disclosure
  • • Detailed reproduction steps
  • • Impact assessment and risk analysis
  • • Proof-of-concept demonstrations
  • • Suggestions for remediation

What We Prohibit

  • • Public disclosure before remediation
  • • Data exfiltration or destruction
  • • Denial of service attacks
  • • Social engineering of employees
  • • Physical security testing

Vulnerability Reporting Process

Required Information

1

Vulnerability Description

Clear description of the security issue

2

Reproduction Steps

Step-by-step instructions to reproduce

3

Impact Assessment

Potential impact and severity rating

4

Supporting Evidence

Screenshots, logs, or proof-of-concept

Response Timeline

24 hoursInitial acknowledgment
7 daysDetailed response
30 daysRemediation plan
90 daysMaximum disclosure timeline

Our Security Commitments

Transparency

Open communication throughout the disclosure process

Recognition

Public acknowledgment for responsible researchers

Protection

Legal protection for good-faith security research

Legal Framework

XPLOREDATUM TECHNOLOGIES LLP is committed to working with security researchers who follow responsible disclosure practices. We will not pursue legal action against researchers who:

  • • Make a good faith effort to avoid privacy violations and data destruction
  • • Contact us first before disclosing the vulnerability publicly
  • • Provide reasonable time for us to respond and address the issue
  • • Do not exploit the vulnerability beyond what is necessary to demonstrate the risk
  • • Follow all applicable laws and regulations

This policy is provided by XPLOREDATUM TECHNOLOGIES LLP, a limited liability partnership registered under the laws of India. This policy is governed by Indian law and any disputes will be resolved in the appropriate courts of Kerala, India.