Report a security issue.
If you have found a weakness in this website, tell an engineer directly. We read each report ourselves and tell you what we did about it.
- reachus@netscale.inPut Security in the subject line.
- Language
- English
- Machine-readable
- /.well-known/security.txt
- Updated
On this page
How to report
Email reachus@netscale.in with Security in the subject line. It reaches an engineer, not a queue. Include:
- the address of the page, or the request, that shows the issue;
- what you did, step by step, and what you saw;
- what someone could do with it;
- how to reach you.
Plain text is fine. If the details are sensitive, send a first email without them and we will agree a way to send the rest.
What is in scope
This website: www.netscale.in and netscale.in, including the form handler behind our enquiry forms at /api/lead/.
Services that other companies run and this site links to, such as LinkedIn, WhatsApp, Google Maps and the certificate register, are theirs: report issues there to them. Systems we run for clients belong to those clients and follow each client’s own reporting route.
Testing we ask you not to do
- No denial-of-service tests, load tests or scanners that send large volumes of requests.
- Keep test enquiries to a few, and put Test in the name field so we can set them aside.
- No phishing, calls or other social engineering of our people, clients or partners.
- No physical access to our office or anyone else’s premises.
- Do not read, change or delete data that is not yours. If you reach someone’s personal data, stop, keep no copy and tell us.
- Give us time to fix an issue before you publish it, and agree the date with us.
What we do with a report
An engineer reads your report and replies from a named address.
We check the issue and tell you whether we could reproduce it and what we plan to change. When the fix is live, we tell you that too.
This is not a paid bug bounty.
Research in good faith
If you follow this page and act in good faith, we will not take legal action against you for that research.
This does not change what the law requires us to report, such as cyber incidents under the CERT-In Directions.
Your own data and other questions
For requests about your own personal data, use the contacts in the privacy notice. For anything else, the contact page has every route to an engineer.
Last updated 9 October 2026.