HomeResponsible Disclosure
RFC 9116 COMPLIANT VDP
// Safe harbor protection and encrypted reporting channels for security researchers.
Sinan Arcana values the global independent security research community. If you have identified a security vulnerability in any Sinan Arcana property or managed platform, we invite you to report it to us responsibly under our Safe Harbor terms.
Safe Harbor Commitment
If you conduct vulnerability research in good faith and in compliance with this policy, Sinan Arcana will:
- Consider your research to be authorized and will not initiate legal action against you.
- Work with you to understand and validate the vulnerability promptly, acknowledging your report within 48 hours.
- Recognize your contribution in our Security Hall of Fame (unless you request anonymity).
In-Scope Assets
- *.sinanarcana.io (Web properties)
- api.sinanarcana.io (Public endpoints)
- FireArc, PurpleArc & NetWard appliances
Strictly Out of Scope
- Denial of Service (DoS/DDoS) attacks
- Social engineering or phishing of employees
- Physical security attacks against our facilities
- Destruction or exfiltration of customer data
PGP Public Encryption Key
Fingerprint: 9FA4 C281 74D9 10E5 8B42 5E1C 0A7B 3824 DF19 2026-----BEGIN PGP PUBLIC KEY BLOCK----- Version: OpenPGP.js v5.1.0 Comment: Sinan Arcana Security Response Key <security@sinanarcana.io> mQENBGX99zYBCACwK1F2qH...[SINAN ARCANA VERIFIED RSA-4096 ROOT KEY]... FINGERPRINT: 9FA4 C281 74D9 10E5 8B42 5E1C 0A7B 3824 DF19 2026 UID: Sinan Arcana Incident Response Command <security@sinanarcana.io> -----END PGP PUBLIC KEY BLOCK-----
Send encrypted vulnerability advisories to security@sinanarcana.io. For active breach emergencies, contact our 24/7 hotline at +880 9658-100200.
RFC 9116 Canonical Endpointhttps://sinanarcana.io/.well-known/security.txt
24/7 Incident Response
Whether you're hardening defenses, preparing for an incident, or in the middle of one, the first call is the same.
DHAKA COMMAND HQ • REGIONAL INCIDENT RESPONSE • BSCIC ELECTRONICS COMPLEX