Security & Vulnerability Disclosure Policy

At Automall Chennai (a unit of Anand & Co), we prioritize the security, privacy, and integrity of our online digital services, customer records, and infrastructure. We welcome feedback and vulnerability reports from security researchers and users following responsible disclosure practices.

1. Scope

This disclosure policy applies to the primary web property: https://automallchennai.com and associated subdomains operated directly by Automall Chennai. Third-party external tools (such as payment gateways, map widgets, and social links) are subject to the policies of their respective operators.

2. How to Report a Vulnerability

If you identify a security defect or vulnerability, please email our security advisory team immediately:

Please include in your report:

• The specific URL or component affected.
• A clear description of the issue and step-by-step reproduction instructions or proof of concept.
• Impact assessment and suggested remediation, if available.

3. Guidelines & Safe Harbor

To maintain safe harbor status and protect customer data, researchers must:

• Refrain from accessing, modifying, or downloading private customer information.
• Avoid disruptive attacks such as Denial of Service (DoS/DDoS), spamming, or automated brute-force attempts.
• Give our engineering team reasonable time to investigate and patch reported findings before public disclosure.

4. Response Timeline

We commit to:

• Acknowledging receipt of valid reports within 48 business hours.
• Providing an initial assessment and estimated remediation timeline.
• Notifying the reporter once the vulnerability has been remediated.