Security

Last updated: 2 August 2026

Security reports are welcome when submitted responsibly.

Report a vulnerability

Email security@rdsupscerp.in with the affected version, platform, reproduction steps, impact and supporting screenshots or logs. Do not include real passwords, tokens or unnecessary personal data.

Responsible testing

Do not access another user's data, disrupt services, perform denial-of-service testing, publish an unpatched vulnerability or use social engineering.

Release verification

Official releases should include SHA-256 checksums. Code signing should be used for Windows and Android distribution when feasible.

Website design

The public site is static and does not require a website database, login form or payment processor. This reduces—but does not eliminate—security risk.