Responsible Disclosure Policy

“We encourage security researchers to report any vulnerabilities they find in our systems. To help us address issues quickly and efficiently, please follow these guidelines:

• Scope: Includes the website (https://nepalintrepidtreks.com) and related subdomains. Out-of-scope systems include third-party services.
• Rules: Do not exploit vulnerabilities to disrupt services or access user data. Notify us promptly and avoid sharing details publicly until we confirm the issue is resolved.
• Commitment: We will acknowledge reports within 3 business days and aim to resolve verified issues within 30 days.

For detailed instructions on secure reporting, visit our PGP Key.”