# Vulnerability disclosure — Bareilly Police TA/DA Portal
# RFC 9116 security.txt
# Prefer coordinated disclosure; do not publicly exploit.
# Canonical host: https://e-tada.in (NEXT_PUBLIC_APP_URL). Alternate: https://e-tada.vercel.app

Contact: mailto:security@e-tada.in
Contact: mailto:ciso@e-tada.in
Contact: mailto:cert-poc@e-tada.in
Contact: mailto:support@e-tada.in
Contact: tel:+91-581-255-0000
Preferred-Languages: hi, en
Expires: 2027-07-12T00:00:00.000Z
Canonical: https://e-tada.in/.well-known/security.txt

# CISO / CERT-In Point of Contact (organisational registration required)
# Policy Officer / CISO: ciso@e-tada.in — configure-on-DNS (provision MX + mailbox; register with CERT-In)
# CERT-In PoC: cert-poc@e-tada.in — configure-on-DNS
# Security / vuln intake: security@e-tada.in — configure-on-DNS (must be monitored)
# Support: support@e-tada.in — configure-on-DNS

# CERT-In (organisational incident reporting duty under Directions dated 28.04.2022):
# Report Annexure-I incidents within 6 hours of noticing / being notified
# Email: incident@cert-in.org.in | Phone: 1800-11-4949
# https://www.cert-in.org.in
# Internal SOP: /docs/INCIDENT-RESPONSE.md (ops repo / controlled copy)