Yayati provides protection for security researchers if they submit vulnerability reports in accordance with this policy. Yayati agrees not to pursue legal action against individuals who:
Engage in testing of systems/research without harming or affecting the operations and data of Yayati and its customers.
Engage in security testing within the scope of our responsible disclosure policy.
Test on products without affecting customers, or their data.
Adhere to the laws of the location of Yayati.
Refrain from disclosing vulnerability details to the public or any third-party entities.
Guidelines for Responsible Disclosure
Upon discovering a security vulnerability or issue related to our products, services, and systems, email [email protected] with the following:
Provide us with a detailed description of the vulnerability or incident, including the steps to reproduce it, if applicable.
Share your contact information so that we can communicate with you regarding the disclosure process and any updates related to the reported issue.
Act in good faith and make a reasonable effort to avoid privacy violations, data destruction, and interruption or degradation of our services during your research.
Allow us a reasonable amount of time to investigate and address the reported issue before public disclosure.
Avoid exploiting any discovered security vulnerabilities beyond what is necessary to demonstrate the issue.