Vulnerability Disclosure & Safe Harbor Policy

1. Safe Harbor Commitment

NavRitu Digital (OPC) Private Limited welcomes good-faith security research conducted in accordance with this policy. We consider research compliant with these guidelines to be authorized conduct and will not initiate legal action against researchers who abide by these rules.

2. Scope & Authorized Domains

• Primary Canonical Target: https://navritu.digital
• Authorized 308 Redirect Fleet: navritudigital.com, navritudigital.co, navritudigital.company, navritudigital.io, navritudigital.net, navritudigital.org, navritu.in, navritu.co, navritu.org, navritu.net, and navritu.info.

3. Rules of Engagement & Prohibitions

• Do not perform Distributed Denial of Service (DDoS), resource-exhaustion floods, or high-velocity automated fuzzing that triggers production circuit breakers.
• Do not access, modify, or exfiltrate data belonging to other tenants or users; stop immediately upon proving an access-control boundary issue.
• Do not conduct social engineering, phishing, or physical attacks against NavRitu Digital personnel or infrastructure providers.

4. Response SLA Targets