Responsible disclosure
This is the plain English version of our /security.txt promise. If you find a fault on webhost24.in, tell us. Here is how to tell us, and here is what happens next.
How to report
- Email security@webhost24.in with a clear subject, such as XSS on /apps/wordpress-hosting.
- If the report is sensitive, mark it CONFIDENTIAL in the subject line. We will reply on PGP.
- Include the URL, the steps to repeat the fault, and a screen shot or video if you can.
- We reply to each report within 1 business day.
What we promise
- We triage within 1 business day. We send a first status note within 3 business days.
- We fix critical issues within 7 days, high within 30 days, and medium within 90 days.
- We give you credit in our security advisory, unless you ask us to keep your name out.
- We take no legal action against people who test in good faith. We follow the safe harbor terms.
What we ask in return
- Give us a fair window before you go public. We have 90 days from the day we confirm, or until we ship a fix. Whichever comes first.
- Do not break privacy, stop the service, or delete data while you test.
- Do not use the fault for more than we need to show it.
- Do not trick our staff or our customers.