We take the security of our registry and our users seriously.
Please DO NOT report security vulnerabilities via public GitHub issues.
If you believe you have found a security vulnerability in isroot.in (e.g., ability to hijack other users' subdomains, XSS, or DNS leaks), please report it to our security team immediately.
How to report:
- Email: security@nevercode.in
- Subject: [SECURITY] Vulnerability Report
We will acknowledge your report within 48 hours and provide an estimated timeline for a fix. We ask that you give us reasonable time to patch the issue before disclosing it publicly.