Responsible Vulnerability Disclosure
Scriza Private Limited values good-faith security research that helps protect Alert21 customers, systems and infrastructure. If you believe you have discovered a security vulnerability, please report it privately through the approved security channel before any public disclosure.
1. In-Scope Research
Research should be limited to Alert21 systems and domains that you are authorized to test. Do not assume that a third-party platform, telecom network, cloud service or vendor connected to Alert21 is in scope.
2. Please Do
- Provide a clear description of the issue and affected URL, API or component.
- Include reproducible steps or a proof of concept that minimizes impact.
- Explain the likely security impact.
- Use only your own accounts and data where possible.
- Stop testing if you encounter customer data, credentials or a risk of service disruption.
- Give us reasonable time to investigate and remediate before public disclosure.
3. Please Do Not
- Perform denial-of-service, traffic flooding or resource-exhaustion tests.
- Use phishing, social engineering, physical attacks or credential stuffing.
- Access, download, alter, retain or disclose customer data beyond the minimum necessary to demonstrate a vulnerability.
- Destroy or corrupt data.
- Install malware, persistence mechanisms or backdoors.
- Test third-party systems without authorization.
- Threaten disclosure or demand payment.
4. Good-Faith Handling
Where research is conducted in good faith, within scope and in accordance with this policy, Alert21 will aim to work constructively with the reporter. This policy does not authorize illegal activity and does not create a promise of payment or bounty unless a separate written program states otherwise.
5. Report a Vulnerability
Send reports to info@scriza.in. Include your contact details, affected asset, reproduction steps, impact and any relevant screenshots or request/response information. Do not include unnecessary personal data.
Turn your next business event into a traceable alert.
Start with DLT-ready SMS today on Alert21’s developer-first communication platform.