Back to Security & Governance
VULNERABILITY DISCLOSURE & SECURITY POSTURE
Security Disclosures & Vulnerability Reporting
Commitment to Zero-Trust Defense, Responsible Bug Bounty, and Rapid Incident Mitigation.
1. Responsible Vulnerability Disclosure Program (VDP)
Vyomara Technologies values the contributions of independent cybersecurity researchers, ethical hackers, and academic institutions in maintaining the highest defense standards. If you believe you have discovered a potential security vulnerability in our public web assets, API gateways, or incubation infrastructure, please report it directly through our secure channel.
2. Responsible Disclosure Guidelines
- Notify us promptly upon discovering any potential security weakness before making public disclosures.
- Do not attempt to access, modify, or delete data belonging to other users or enterprise clients.
- Avoid executing destructive testing, Denial-of-Service (DoS/DDoS) attacks, or automated high-rate fuzzing against production systems.
- Provide sufficient technical detail, reproduction steps, and proof-of-concept (PoC) payloads in your initial report.
3. Our Security SLA & Incident Response Timelines
Initial Acknowledgment
< 24 Hours
Direct triage by DevSecOps lead.
Triage & Validation
< 48 Hours
Severity score assigned (CVSS v3).
Remediation Patch
< 7 Business Days
Canary release & verification.
4. Submit a Security Report
Please send encrypted or standard technical reports to our security response team:
Email: info@vyomaratechnologies.com (Subject: [SECURITY VULNERABILITY] - Target Component)
Our security team will coordinate directly with you regarding verification and public attribution on our Security Hall of Fame.