Latest alerts
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins Hackers hijack Google domains after breaching ccTLD registries Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances Microsoft Outlook to block MSIX attachments starting November CriticalUnpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet PoeLLM malware infects exposed AI servers in cryptomining attacks CriticalRansomware has a new target. Is your backup ready?
  1. Home
  2. Responsible Disclosure
// responsible disclosure

Found a vulnerability? Tell us.

We practise what we preach. If you find a security issue in our systems, we want to hear about it.

How to report

Email security@dravincon.com with a description, steps to reproduce, the affected URL and the potential impact. Our security.txt follows RFC 9116.

In scope

  • www.dravincon.com and its sub-paths

Client systems are never in scope — report those directly to the client.

Please do

  • Give us reasonable time to fix the issue before disclosing it publicly
  • Use test data only and stop as soon as you've confirmed the issue
  • Keep any personal data you encounter confidential, and delete it

Please don't

  • Run denial-of-service, spam or social-engineering attacks
  • Access, modify or delete data that isn't yours
  • Use automated scanners that generate heavy traffic

Our promise

We'll acknowledge your report promptly, keep you updated, credit you if you wish, and won't pursue legal action for good-faith research that follows this policy.

Call Email Under attack? Free DPDP Check