generated: '2026-07-19'
method: searched
source: https://www.firstcry.com/policy/responsible-vulnerability-disclosure
probe: true
program_type: responsible-disclosure
bug_bounty: false
policy:
- https://www.firstcry.com/policy/responsible-vulnerability-disclosure
contact:
- secure@firstcry.in
scope: Shopping and Parenting applications across desktop, mobile web, and mobile apps,
  including related subdomains.
prioritized_vulnerabilities:
- Authentication and authorization flaws
- Insecure cryptography
- Remote code execution
- Injection vulnerabilities
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
- Business logic flaws
recognition:
- Acknowledgement email
- Digital certificate of appreciation
- Hall of Fame listing (severity-based)
evidence:
- source: https://www.firstcry.com/policy/responsible-vulnerability-disclosure
  kind: disclosure-page
  keywords:
  - responsible disclosure
  - security contact
  - report vulnerability