Security
Responsible Disclosure
Last updated: 23 August 2026
Please report suspected vulnerabilities privately and give us a reasonable opportunity to investigate and address them.
What to include
- Affected page, feature or endpoint.
- Clear reproduction steps.
- Expected and actual behaviour.
- Potential security impact.
- Screenshots or logs, after removing sensitive user/accounting data.
What not to do
- Do not access, download or disclose another user's data.
- Do not intentionally delete or alter production data.
- Do not perform denial-of-service testing.
- Do not publish a vulnerability before we have had a reasonable chance to respond.
Contact
Email anup.samh@gmail.com with the subject “Security Report — Yukti.dev”.