§ 01
Scope
This site, sphuran.in, and any first-party infrastructure we explicitly mark as in-scope. Third-party platforms (hosting, email) should be reported to those providers directly.
§ 02
Contact
security@sphuran.in. PGP key available on request.
§ 03
What we ask
A clear technical description, reproduction steps, and a reasonable disclosure window. Please do not retain or exfiltrate data beyond what is needed to demonstrate the issue.
§ 04
What we commit
Acknowledgement within 3 working days. A disposition within 30 days. Credit in our acknowledgements unless you prefer anonymity.
§ 05
Out of scope
Social engineering, physical attacks, and denial-of-service testing.
Sphuran Industries Pvt. Ltd. · v1.0 · 2026-03-01