Last updated: 14 October 2026
How to report
Email security@arthonsys.com with a description of the issue, the steps to reproduce it and the impact you believe it has. English or Hindi is fine.
Please give us a reasonable time to fix the issue before you share it with anyone else.
In scope
estatrail.com and, once they are live, the Estatrail app and its API.
Allowed
Testing with your own account and your own data.
Collecting only the minimum proof needed to show the issue.
Not allowed
Accessing, changing or deleting other people's data.
Denial-of-service attacks or load testing.
Spamming our forms or sending automated requests in bulk.
Social engineering of our staff or customers, and physical attacks on our offices or equipment.
Our promise
We will reply within 3 working days and keep you updated while we investigate.
We will fix valid issues and, if you want, credit you on our thanks list.
We will not take legal action against good-faith research that follows these rules.