Last updated: 22 October 2026
We train people to find security flaws, so we expect ours to be found too. If you have discovered a vulnerability in our website or systems, we want to hear about it, and we will not take legal action against you for reporting it in good faith under the terms below.
Reporting a vulnerability
Email [email protected] with the subject line Security Report. Please include:
- Where the issue is — the URL, endpoint or parameter.
- What the issue is, and the steps needed to reproduce it.
- What an attacker could do with it.
- Any screenshot, request or proof-of-concept that helps us confirm it.
Please report in English, and give us a way to reach you for follow-up questions.
What is in scope
- ignitetechnologies.in and its subdomains.
- Systems we clearly operate ourselves.
What is out of scope
- Third-party services we use but do not control, such as Google Forms, Google Analytics, Google Maps and WhatsApp. Report those to the provider.
- Findings from automated scanners with no demonstrated impact.
- Missing security headers, cookie flags or TLS configuration preferences with no working exploit.
- Social engineering of our staff or students, phishing, and physical attacks.
- Denial of service, traffic flooding, brute forcing and anything that degrades service for others.
- Self-inflicted issues that need an already-compromised browser or device.
Safe harbour
If you follow this policy, make a good-faith effort to avoid harm, and give us a reasonable chance to fix the issue before disclosing it, we will treat your research as authorised and will not pursue legal action against you. If a third party brings action against you for research that followed this policy, we will make it known that you were acting within it.
What we ask of you
- Do not access, download, alter or delete data that is not yours. If you reach personal data, stop and tell us what you found.
- Use the smallest test that proves the issue. Do not pivot further into our systems than needed to demonstrate it.
- Do not degrade our service or disrupt a live class.
- Do not disclose the issue publicly until we have had a reasonable chance to fix it.
- Do not demand payment in exchange for withholding a report.
What you can expect from us
- Acknowledgement within 3 working days of your report reaching us.
- After that, we will tell you whether we have reproduced the issue, and keep you updated while we work on a fix.
- We will let you know once it is fixed.
- If you would like credit, we are happy to acknowledge you publicly once the fix is live. Tell us how you would like to be named.
Working days are Monday to Saturday, excluding public holidays in India. If you have not heard from us within 3 working days, please follow up on +91-959 938 7841 — it is more likely the mail went astray than that we are ignoring you.
We do not currently run a paid bug bounty programme, so reports are not rewarded with money.
How we protect your information
- The site is served over HTTPS, and pages send strict browser security headers including a Content Security Policy.
- We do not take payment card details on this website. There is no checkout here.
- We ask for the minimum information needed to reply to you and deliver your course.
- Access to student records is limited to the team members who need it.
What we collect and how we use it is set out in our privacy policy.
A note for our students
If you are learning with us, please do not practise on this website or on our infrastructure. Use the lab environments provided with your course. Testing production systems without written authorisation breaks our terms and, in India, the Information Technology Act, 2000.