Security Policy

AarogyaShree Foundation Security Policy

AarogyaShree Foundation is committed to maintaining the security, integrity, and availability of its website, digital platforms, and organizational information systems.

Reporting Security Vulnerabilities

If you believe you have discovered a security vulnerability affecting our website, systems, or online services, please report it responsibly to:

Email: security@aarogyashree.org

Please include:

• Description of the vulnerability

• Steps to reproduce the issue

• Affected URL, page, or system

• Screenshots or supporting evidence, if available

• Your contact information for follow-up communication

Responsible Disclosure

We encourage responsible disclosure of legitimate security vulnerabilities.

We request that researchers:

• Avoid accessing, modifying, deleting, or downloading data that does not belong to them.

• Avoid disrupting website operations or services.

• Avoid conducting denial-of-service (DoS/DDoS) attacks.

• Avoid attempting unauthorized access to user accounts, servers, databases, or infrastructure.

• Provide sufficient information to allow verification and remediation of the reported issue.

Our Commitment

Upon receiving a valid security report, AarogyaShree Foundation will:

• Review and assess the reported issue.

• Acknowledge receipt of the report when appropriate.

• Take reasonable steps to investigate and remediate confirmed vulnerabilities.

• Maintain confidentiality of vulnerability reports where applicable.

Scope

This policy applies to:

• www.aarogyashree.org

• Official subdomains owned and controlled by AarogyaShree Foundation

• Official web applications and digital services operated by AarogyaShree Foundation

Exclusions

The following activities are not authorized and may result in legal action:

• Social engineering attacks

• Phishing campaigns

• Physical security testing

• Denial-of-service attacks

• Spam or mass automated requests

• Unauthorized access attempts

• Data theft, modification, or destruction

No Bug Bounty Program

AarogyaShree Foundation currently does not operate a bug bounty or vulnerability reward program. Submission of vulnerability reports does not create any entitlement to compensation or reward.

Policy Updates

This Security Policy may be updated periodically without prior notice. The latest version will always be available on this page.

Last Updated: June 2026