Security & Responsible Disclosure
Last updated: November 2026
Our Commitment to Security
At MultiLinkQR, the security of our users and their data is our highest priority. We design our systems following industry-standard secure coding practices, rigorous authorization controls and defense-in-depth principles. We follow India's DPDP Act and common security best practices.
We appreciate the vital contributions of independent security researchers to the safety of the internet and welcome responsible vulnerability disclosures.
How to Report a Vulnerability
If you have discovered a potential security vulnerability in MultiLinkQR services, please notify us immediately by emailing our dedicated security team:
Please include the following in your report:
- Description of the vulnerability and its potential impact.
- Detailed, step-by-step reproduction steps or proof-of-concept (POC).
- Affected endpoints, URLs, or components.
- Your contact information for follow-up questions.
We aim to reply within 24 hours and to fix confirmed issues quickly.
Safe Harbor & Legal Protection
We pledge that we will not pursue legal action against researchers who identify and disclose potential vulnerabilities in good faith and in compliance with our guidelines:
Good-faith effort: Make a good-faith effort to avoid privacy violations, data destruction, and interruption or degradation of our services (no DDoS or spamming).
No data access: Do not view, modify, or download data belonging to other users. Only test using accounts and codes you own.
Responsible timing: Give us reasonable time to fix the issue before public disclosure.
Out of Scope
The following activities are strictly out of scope:
- Denial of Service (DoS/DDoS) attacks against any MultiLinkQR service.
- Spam, phishing, or social engineering attacks against our users or staff.
- Physical security attacks against any data center or office facilities.
- Automated scanner spam without evidence of an exploitable vulnerability.
Hall of Fame
We gratefully acknowledge responsible disclosures that help keep MultiLinkQR safe. Researchers who report qualifying, previously unknown vulnerabilities in accordance with this policy will be credited here upon request.