Responsible Disclosure

Last updated: 21 September 2026

1. Where to report

Email contact@qryptonox.in with the subject “Security Vulnerability”. Please include the affected URL or system, clear reproduction steps, the potential security impact, and a safe proof of concept where appropriate.

2. Good-faith security research

Please keep testing limited to QryptoNox-owned assets that you are authorised to access. Avoid privacy violations, service disruption, social engineering, credential attacks, destructive actions, persistence, or attempts to access customer or third-party data.

If you encounter personal, confidential, customer, or otherwise sensitive information while testing, stop testing immediately and report the issue to us.

3. Out-of-scope activities

• Testing third-party services, customer systems, or infrastructure not owned by QryptoNox.
• Denial-of-service, spam, phishing, social engineering, or physical attacks.
• Automated high-volume scanning that could degrade service availability.
• Testing that depends on stolen, leaked, or otherwise compromised credentials.
• Issues that are purely informational and do not demonstrate a meaningful security impact.

4. What you can expect from us

We will aim to acknowledge credible vulnerability reports promptly, investigate the reported issue, request additional information when necessary, and coordinate remediation based on severity and complexity.

Please allow us a reasonable opportunity to investigate and remediate a reported issue before making details publicly available.

5. No guaranteed bug bounty

QryptoNox does not currently operate a guaranteed paid bug-bounty programme. Any recognition, acknowledgement, or reward is entirely discretionary and should not be assumed before conducting security research.

6. Safe-harbour intent

QryptoNox supports good-faith security research that follows this Responsible Disclosure policy. This policy is intended to provide a clear reporting channel and reasonable expectations for researchers; it does not authorise testing of systems you do not own or otherwise have permission to test.

7. Contact

QryptoNox Private Limited
Registered Office: 5th Floor, Plot No: 802 & 803, Nexus Business
Centre, Ayyappa Central, Ayyappa Society, Madhapur, Hyderabad,
Telangana, 500081, India
Email: contact@qryptonox.in
Phone: +91 91219 48989