Security Disclosure & Vulnerability Reporting

Reporting a vulnerability

If you believe you have found a security vulnerability affecting SCAIQ™ or Ath Software Solutions Pvt. Ltd. systems, please report it to us directly rather than disclosing it publicly.

Contact: sales@athsoft.com with the subject line "Security Disclosure". [PLACEHOLDER: a dedicated security@athsoft.com mailbox should be established before launch.]

What to include

• A description of the vulnerability and its potential impact
• Steps to reproduce, including affected URLs, versions, or configurations
• Any supporting evidence (screenshots, logs, proof-of-concept) — please avoid accessing or modifying data beyond what is necessary to demonstrate the issue

Scope

This policy covers the SCAIQ™ website and, where applicable, the SCAIQ™ platform itself. It does not cover denial-of-service testing, social engineering, or physical security testing without prior written authorization.

Our commitment

We will acknowledge good-faith reports and work with you to understand and address the issue. We will not pursue legal action against researchers who act in good faith, report responsibly, and avoid privacy violations, data destruction, or service disruption.