Security
Your security is our priority
At Sidharth S (zidhuxd), we build with security as a first principle—not an afterthought. Every website and software product we ship follows industry-standard practices to protect your data and guarantee a safe experience.
How we protect you
Built on a foundation of security
We implement layered defenses across every product we ship, continuously monitor for emerging threats, and respond swiftly to any reported concern.
End-to-end encryption
All sensitive data in transit is protected using TLS 1.2+ encryption, ensuring your information cannot be intercepted or read by third parties.
Access control
Role-based permissions and least-privilege principles govern every system boundary. Only authorized parties can access sensitive resources.
Dependency monitoring
We continuously audit third-party dependencies and apply security patches promptly to minimize exposure from supply-chain vulnerabilities.
Open source transparency
Where possible, our code is public. Transparency fosters trust—you can review, audit, or contribute to the projects that power our products.
Proactive threat monitoring
Our infrastructure is monitored continuously. Anomaly detection and alerting pipelines are in place to catch and contain incidents early.
Regular security updates
We stay current with CVEs and industry advisories, shipping security fixes quickly—often within 24 hours of a vulnerability being confirmed.
Responsible disclosure
Found a vulnerability? Here's how to report it
We appreciate and welcome responsible disclosure from the security community. Follow these steps to report a potential issue safely.
Email us privately
Send a detailed description of the vulnerability to security@zidhuxd.com. Include affected URLs, reproduction steps, and potential impact. Do not post publicly yet.
Await acknowledgement
We aim to acknowledge all valid reports within 48 hours. We'll confirm receipt, provide an initial assessment, and keep you updated on remediation progress.
Coordinated disclosure
Once a fix is deployed, we'll coordinate with you on a public disclosure timeline—crediting your contribution if you'd like. We ask that you give us at least 90 days before publishing.
Out of scope
Rate limiting, missing DMARC records on non-critical domains, social engineering, and physical attacks fall outside the scope of this program and will not be acted upon.
Have a security question?
Reach out through our contact page or email us directly—we respond promptly to all security inquiries.