Security

Last updated: 7 August 2026

Security reports are welcome when submitted responsibly.

Report a vulnerability

Email security@rdsupscerp.in with the affected version, platform, reproduction steps, impact and supporting screenshots or logs. Do not include real passwords, tokens or unnecessary personal data.

Responsible testing

Do not access another user's data, disrupt services, perform denial-of-service testing, publish an unpatched vulnerability or use social engineering.

Website and account security

Public pages are delivered as static website assets, while authenticated account, community and support features use Supabase with row-level security. The browser receives only a publishable client key; private API secrets and privileged operations stay server-side behind database policies or Edge Functions.

Release verification

Official releases should include SHA-256 checksums. Code signing should be used for Windows and Android distribution when feasible.