FirstCry · Vulnerability Disclosure

Firstcry Vulnerability Disclosure

Vulnerability disclosure

FirstCry publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyConsumerRetailE-CommerceBabyKidsMaternityOmnichannelIndia
Program:

Disclosure Policy

Policy
https://www.firstcry.com/policy/responsible-vulnerability-disclosure

Security Contact

Contact
secure@firstcry.in

Source

Vulnerability Disclosure

firstcry-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-19'
method: searched
source: https://www.firstcry.com/policy/responsible-vulnerability-disclosure
probe: true
program_type: responsible-disclosure
bug_bounty: false
policy:
- https://www.firstcry.com/policy/responsible-vulnerability-disclosure
contact:
- secure@firstcry.in
scope: Shopping and Parenting applications across desktop, mobile web, and mobile apps,
  including related subdomains.
prioritized_vulnerabilities:
- Authentication and authorization flaws
- Insecure cryptography
- Remote code execution
- Injection vulnerabilities
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
- Business logic flaws
recognition:
- Acknowledgement email
- Digital certificate of appreciation
- Hall of Fame listing (severity-based)
evidence:
- source: https://www.firstcry.com/policy/responsible-vulnerability-disclosure
  kind: disclosure-page
  keywords:
  - responsible disclosure
  - security contact
  - report vulnerability