Times Internet Limited
Vulnerability disclosure program on security.txt timesinternet.in
- Top reward
- No cash rewards
- Top severity paid
- Not published
- Assets in scope
- 7
- Public CVEs
- 0
- Last change
At a glance
What to know before you start testing.
- No cash rewards
- A disclosure program: you report for credit, not money.
- Report by email
- [email protected]
- Partial safe harbor
- Some legal protection; read the terms.
- Replies within 10 days
- As the policy promises.
Rewards
What the company's own policy page says it pays.
This program does not pay cash rewards.
- Response
-
Within 10 days
Once a vulnerability report is received, we will acknowledge its receipt within 10 business days.
- Safe harbor
-
Partial
We will not initiate legal action against researchers if they adhere to this Responsible Vulnerability Disclosure Policy.
- Hall of fame
-
Yes
With the researcher's permission, we may publicly recognize and acknowledge their contribution to improving our security posture.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
7 assets you may test.
Domains 7
- clmbtech.com
- economictimes.com
- indiatimes.com
- timesinternet.in
- timesofindia.com
- toptamilnews.com
- udaipurtimes.com
Rules
What the policy asks of you, and the bug types it won't reward, quoted from Times Internet Limited's policy. "We" in these lines means the program, not this site.
While testing
-
Prior to conducting any testing or assessment on our systems, we request researchers to reach out to us and request permission.
-
Unauthorized testing or assessment is strictly prohibited and may result in legal action.
-
Researchers must ensure that their testing activities do not disrupt or degrade the availability or performance of our systems.
-
Attempting to gain unauthorized access to or exfiltrate data from our systems.
-
Conducting denial-of-service attacks, brute-force attacks, or any activity that may harm the systems, data, or users.
-
Modifying or deleting data without explicit permission.
-
Researchers are expected to respect the confidentiality of any non-public information they may access during their testing activities.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 11 Nov 2026. Last checked 3 hours ago.
-
Scope +
Added to scope: toptamilnews.com
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.