TechYenthra Technologies Private Limited values the security community's contributions to keeping our systems and our clients' systems secure. We encourage responsible disclosure of security vulnerabilities and commit to working collaboratively with researchers who report issues in good faith.
Scope
This policy applies to security vulnerabilities discovered in: www.techyenthra.com and its subdomains; publicly accessible APIs operated by TechYenthra; and software products owned and operated by TechYenthra (including CodeSense and Jothisham). This policy does not apply to vulnerabilities in third-party products or client-owned systems, which should be reported directly to the respective vendor.
How to Report
To report a vulnerability, please email us at info@techyenthra.com with the subject line 'Responsible Disclosure – [Brief Description]'. Your report should include: a clear description of the vulnerability; the affected URL, endpoint, or component; steps to reproduce the issue; the potential impact or severity; your contact information for follow-up. Please do not publicly disclose the vulnerability until we have had an opportunity to investigate and remediate it.
What We Ask of Researchers
When conducting security research, please: (1) Act in good faith — do not exploit the vulnerability beyond what is necessary to demonstrate the issue. (2) Avoid accessing, modifying, or deleting data that does not belong to you. (3) Do not perform Denial of Service (DoS) attacks, social engineering, or physical attacks. (4) Do not access accounts or systems without explicit permission. (5) Keep findings confidential until we confirm remediation or agree on a coordinated disclosure date.
Our Commitments
When you report a vulnerability in good faith and follow this policy, we commit to: acknowledging receipt of your report within 3 business days; providing an initial assessment of the report's validity and severity within 10 business days; keeping you informed of our remediation progress; notifying you when the issue is resolved; and not pursuing legal action against researchers who act in good faith in accordance with this policy.
Severity Classification
We classify vulnerabilities using the Common Vulnerability Scoring System (CVSS): Critical (9.0–10.0) — remediated within 24 hours; High (7.0–8.9) — remediated within 7 days; Medium (4.0–6.9) — remediated within 30 days; Low (0.1–3.9) — remediated within 90 days. We prioritise fixes based on severity and potential impact on users and client data.
Recognition
We are grateful to security researchers who help improve the security of our systems. While we do not currently offer a formal bug bounty programme, we acknowledge researchers who report valid vulnerabilities by crediting them in our security acknowledgements (with their permission) and expressing our sincere gratitude.
Contact
Security reports: info@techyenthra.com (Subject: Responsible Disclosure – [Issue]) | Phone: +91 81051 77337. For non-security enquiries, please use our contact form at www.techyenthra.com/contact.
Governing Law & Jurisdiction: This document shall be governed by the laws of India. Subject to applicable law, the courts having jurisdiction in Madurai, Tamil Nadu, India shall have exclusive jurisdiction over any disputes arising from this document.
Right to Modify: TechYenthra Technologies Private Limited reserves the right to update, amend, or replace any part of this document at any time. Changes take effect upon publication on our website. Continued use of our services after any modification constitutes acceptance of the revised document.
Severability: If any provision of this document is found to be invalid, unlawful, or unenforceable by a court of competent jurisdiction, such provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall continue in full force and effect.
© 2026 TechYenthra Technologies Private Limited · CIN: U62011TN2026PTC194186 · All rights reserved.