Responsible Disclosure Policy

Security is a shared responsibility. If you believe you've found a security vulnerability in this website, I welcome your report and will work with you to understand and resolve it quickly.

Please email a detailed report to freelance@chiragarora.in. Include enough information to reproduce the issue — affected URL or endpoint, a description of the vulnerability, and the steps or proof-of-concept needed to validate it.

When investigating, please:

• Act in good faith and avoid privacy violations, data destruction, or service disruption.
• Only interact with accounts you own or have explicit permission to access.
• Give reasonable time to resolve an issue before any public disclosure.
• Do not exploit a vulnerability beyond what is necessary to demonstrate it.

I will acknowledge your report, keep you informed of progress, and credit your contribution if you wish. Good-faith research conducted in line with this policy will not be pursued as a hostile act.

The same principles guide every client engagement. Vulnerabilities identified during authorized testing are disclosed privately and securely to the client, with evidence and remediation guidance, and are never published or shared without the client's consent. I do not advertise, perform, or support unauthorized exploitation or access to any third-party system.