Security Vulnerability Reporting

At Jainam, keeping our trading platforms, client portals, and APIs secure is treated as a continuous responsibility, not a one-time exercise. If you come across something that looks like a security weakness while going about normal, authorized use of our services, we want to hear about it — and this page tells you how.

Jainam does not invite, authorize, or otherwise permit anyone to actively test, scan, probe, or attempt to breach its websites, applications, APIs, or backend systems. There is no standing authorization for penetration testing or vulnerability research of any kind on our infrastructure. If a concern surfaces incidentally during ordinary use, that’s what this channel is for — it is not an invitation to go looking.

Send us enough detail to identify the affected service and understand the nature of the issue — a URL/endpoint, the steps that led you to notice it, and what you observed is usually sufficient. Please do not go further than necessary to describe the issue: do not access, download, alter, or share any customer, employee, or other non-public data you may encounter in the process.

Jainam does not run a public bug bounty or vulnerability rewards program. Submitting a report through this channel does not come with any promise of payment, credit, or other reward — reports are reviewed and acted on because security matters to us, not as part of a compensated program.

Jainam reserves the right to take appropriate action, including legal action, in response to any unauthorized activity involving its systems or infrastructure.