$ cd security

Security Policy

I build real software and hardware systems. If you have discovered a potential security flaw in any of my projects, here is how to report it responsibly.

RFC 9116Responsible Disclosure

How to Report a Vulnerability

If you believe you have found a security vulnerability in Orange Taxi, the Autonomous Search and Rescue Robot, Animal Detection on Locomotive Tracks, or this website, please send an email directly to akshat070906@gmail.com.

Please include in your report:

Product name: Specify which system or repository is affected.
Steps to reproduce: Clear, step-by-step instructions or proof-of-concept explanation.
Impact: What an attacker could accomplish with this issue.
Environment: Relevant browser, OS, device, or API endpoints.

Email Security Report View .well-known/security.txt

Guidelines & Scope

When conducting security research on my systems, please act in good faith:

Do not access other people's data. If you encounter personal records, stop and report the issue immediately.
Do not destroy, modify, or degrade production services or physical hardware.
Allow reasonable time to investigate and patch the issue before publicly discussing it.

Notice: This is an independent engineer's workshop and student portfolio. I do not operate a commercial bug bounty program, nor do I provide SLAs, financial rewards, or certifications. I appreciate legitimate responsible reports and review them personally.