Compliance
CERT-In Alignment
Security operations follow CERT-In guidelines for incident reporting and infrastructure hygiene.
Incident response
Security incidents are triaged and, where they fall within CERT-In's notified categories of cyber security incidents (per CERT-In's Cyber Security Directions, 2022), reported to CERT-In within 6 hours of noticing or being made aware of the incident. An internal on-call rotation owns detection and response around the clock.
Infrastructure hygiene
Regular vulnerability scanning, patch management, and access reviews are run against production systems. Logs required for CERT-In reporting are retained per the prescribed period.
Reporting a concern
If you believe you've found a security issue, contact us through the Contact page and mark it as a security report.