Responsible Vulnerability Disclosure Policy
Report security vulnerabilities to DigiWorku responsibly. Our disclosure guidelines, scope, reporting process, and researcher recognition programme.
How to Report a Security Vulnerability to DigiWorku
DigiWorku encourages security researchers and ethical hackers to report potential vulnerabilities in our platform in a responsible manner that allows us to address issues before they are publicly disclosed.
If you discover a potential security vulnerability affecting digiworku.in, our APIs, or any related infrastructure, please send a detailed report to our security team via the contact email listed on this page. Include a clear description of the vulnerability, steps to reproduce it, and any supporting evidence.
We commit to acknowledging all valid vulnerability reports within 48 hours, providing regular status updates during investigation, and issuing a fix or mitigation within 30 days for critical-severity findings. We will not pursue legal action against researchers who follow this responsible disclosure process.
We maintain a researcher recognition programme for valid disclosures that are not already known to our team. Researchers may be credited in our security acknowledgements page and may receive a token of appreciation for critical findings.