Security & vulnerability reporting

We take the security of www.webzosh.in and of the information people send us seriously. If you believe you have found a security vulnerability in this website, please tell us.

How to report

Email contact@webzosh.in with the subject “Security report”. Please include:

• the page or address affected, and what kind of problem it is;
• the steps to reproduce it, and what an attacker could do with it;
• how we can reach you, if we have questions.

Please don’t include other people’s personal data in your report. We will acknowledge your report, keep you updated while we investigate, and tell you when the problem is fixed. We do not run a paid bug bounty.

Please stay within these limits

• Test only against your own submissions; don’t access, change or delete other people’s data.
• Don’t send spam, use automated scanners that flood the website, or disrupt the service (no denial-of-service testing).
• Don’t use social engineering or physical attacks against our team, clients or providers.
• Give us reasonable time to fix the problem before you tell anyone else about it.

This page covers this website only. Our clients’ websites and apps, and services run by other companies (such as WhatsApp, Google or Cloudflare), have their own owners — report problems in them to those owners.

Machine-readable contact

Our security contact is also published at /.well-known/security.txt, following the security.txt standard (RFC 9116).