Vulnerability Disclosure Program

Term Insurance AWARD WINNING

Investment Plans

NRI Plans

All Plans

Customer Service

Calculators

Fund Performance

Scope

In Scope	Out of Scope
Public-facing web applications Mobile applications APIs and services Domains and subdomains owned/operated by our organization Third-party integrations directly integrated with our systems	Third-party systems not controlled by us Denial of Service (DoS/DDoS) attacks Social engineering attacks Physical attacks Spam or automated scanning without validation

Program Guidelines
- Who Can Participate
  Our program is open to external security researchers. Employees and contractors are not eligible.
- Confidentiality
  All submissions are treated as confidential unless disclosure is required by law.
- Safe Research
  We support good-faith security research and no legal action will be taken when guidelines are followed.
- Expected Conduct
  Participants must follow ethical practices. Misuse may result in disqualification.
- Program Updates
  We may update or discontinue the program at any time.
Reporting Process
- When reporting a vulnerability, please include:
- Detailed description of the issue
- Steps to reproduce
- Impact assessment
- Proof of Concept (PoC)
- Screenshots or logs (if applicable)
Submission Email

Send your vulnerability report to:

responsible-disclosure@tataaia.com
Consent Declaration

By submitting this report, I confirm that I have adhered to the responsible disclosure guidelines and conducted testing in good faith within the defined scope. I understand that any violation of these guidelines may result in disqualification from the program and may be subject to appropriate legal action, where applicable.
Rewards & Recognition
- Researchers may be listed in our Hall of Fame.
- Exceptional reports may receive special recognition.
- Recognition is based on impact and responsible disclosure.