Skip to content
chatops.inchatops.in
Security & Trust

Vulnerability Disclosure Policy

We take the security of candidate data and our autonomous career systems seriously. Here is how to responsibly report vulnerabilities.

Safe Harbor Promise

If you conduct security research in good faith and adhere to this policy, we consider your activities authorized. We will not pursue legal action against researchers for discovering and reporting vulnerabilities within scope, provided you do not access other candidates’ personal data, destroy data, or disrupt our systems.

In-Scope Assets

  • chatops.in & www.chatops.in
  • api.chatops.in
  • Candidate authentication, ATS scanning & billing workflows

Our Commitments

  • 72-hour acknowledgment: We acknowledge receipt within 3 business days.
  • Triaged resolution: We prioritize verified issues by severity.
  • Zero legal retaliation: Safe harbor for constructive research.

How to Submit a Report

Please email details to security@chatops.in. Include:

  1. Description of the vulnerability and its potential impact.
  2. Exact endpoint, URL, or API parameter affected.
  3. Step-by-step reproduction instructions or a minimal proof-of-concept.
Out of Scope: Denial of Service (DoS/DDoS) attacks, brute-force against rate-limited endpoints, social engineering, and automated scanner spam without a manual proof of concept.