Our approach
Security is part of publishing reliability
Prabhat Kiran uses administrative, technical and organizational safeguards to protect its website, mobile applications, ePaper service, newsroom systems and operational platforms. Access is limited according to role, sensitive traffic is transmitted over encrypted connections, and service activity may be logged for security, reliability and abuse prevention.
No internet service can guarantee complete security. We review credible reports and prioritize remediation according to potential impact.
Prabhat Kiran staff will never ask you to send a password or one-time password by email. Keep your login credentials private and report suspicious communication.
Responsible disclosure
How to report a potential vulnerability
Document
Record the affected page or service, reproduction steps, observed behavior and expected behavior.
Limit impact
Use the minimum access necessary to demonstrate the issue. Stop if you encounter personal, confidential or newsroom data.
Send privately
Email the details to contactus@prabhatkiran.co.in with the subject “IT Security Report”.
Helpful reports include a concise description, affected URL or app version, date and time observed, browser or device information, proof-of-concept details, and a safe way to contact the reporter.
Safe research
What we ask security researchers to avoid
- Do not access, download, change, retain or disclose another person's data.
- Do not perform denial-of-service testing, destructive actions, spam, social engineering or physical attacks.
- Do not upload malware, attempt credential theft, or test third-party services not controlled by Prabhat Kiran.
- Do not publicly disclose an unresolved issue before we have had reasonable time to investigate and respond.
- Do not demand payment or make threats as a condition of reporting a vulnerability.
After reporting
Review and response process
We will route a credible report to the appropriate technical owner, validate the issue, assess severity, and work toward a proportionate fix. Response and remediation time depends on complexity, affected systems, third-party dependencies and risk.
Sending a report does not create a contract, employment relationship, entitlement to payment, or guaranteed response. Any recognition or reward is entirely at the publisher's discretion.
Coverage
Services covered by this page
This reporting process is intended for security concerns affecting Prabhat Kiran-owned web properties, official Android and iOS applications, ePaper delivery, and authenticated ERP or newsroom services. Third-party websites, social platforms, advertising networks and external services are outside our control and should be reported to their respective owners.
For privacy or account deletion requests, use our Privacy Policy or Account Deletion page.