Security policy

Version 1.0 · Published 15 September 2026

Report a security weakness

If you believe you have found a security weakness in Durjeya’s public website, please email mail@durjeya.com with the subject Security report. We welcome clear, good-faith reports and ask that you give us a reasonable opportunity to investigate and remediate before publishing details.

Scope

This policy covers the public website at durjeya.com. It does not authorise testing of CORTEX product deployments, examination systems, customer or partner systems, hosting-provider infrastructure, or any third-party service linked from or embedded in the website.

Good-faith testing

Use the minimum interaction needed to demonstrate the issue.
Stop immediately if you encounter personal data, private communications or unintended administrative access.
Do not access, copy, alter, delete, retain or disclose another person’s data.
Do not disrupt availability, degrade service, introduce malware, submit spam, conduct social engineering or phishing, or use high-volume automated scanning.
Do not test accounts, systems or physical premises belonging to customers, partners, employees or third parties.

What to include

The affected URL or component.
A concise description of the weakness and its likely impact.
Reproducible steps using non-destructive evidence.
Any relevant request identifiers, timestamps, screenshots or redacted logs.
A safe way to contact you for clarification.

Please do not include passwords, access tokens, personal data or other people’s confidential information in the report.

What we will do

We will acknowledge the report, assess it, ask focused questions where necessary, and coordinate remediation and disclosure in good faith. We may already know about the issue or decide that it does not create a security risk; if so, we will explain our assessment where practical.

Durjeya does not operate a public bug-bounty programme, and this policy does not promise payment or authorise conduct that violates applicable law or third-party rights.

Other enquiries

For privacy requests, please use our Privacy policy. For general questions, use the contact form.