Trust & Governance

Security & Vulnerability Disclosure Policy.

How DIKRIT handles responsible vulnerability disclosures, conducts authorized client engagements, and protects data privacy.

01 / COORDINATED DISCLOSURE

Vulnerability Reporting

If you discover a security flaw in DIKRIT systems or open-source assets, report it to contact@dikrit.in. We commit to acknowledging receipt within 48 hours, conducting remediation within 30 days, and not pursuing legal action against researchers acting in good faith under responsible disclosure.

02 / RULES OF ENGAGEMENT

Authorized Client Testing

All penetration testing and security assessments performed by DIKRIT are conducted strictly under mutual written authorization, defined scope boundaries, clear non-disclosure agreements (NDAs), and standard rules of engagement aligned with NIST SP 800-115 and OWASP WSTG.

03 / DATA MINIMIZATION

Privacy & Zero Tracking

DIKRIT operates under strict data minimization. We do not use third-party advertising tracking pixels, cross-site trackers, or marketing cookies. Contact form submissions are processed securely and used solely for direct client communications.

Have a security question?

Reach our security desk.

For security reports, GPG verification, or enterprise compliance queries, contact our founders directly.

Contact Security Desk