A security company should show its own working.
Here’s how we secure our platform, how researchers can reach us, and — honestly — where our certification roadmap stands today.
How we secure ourselves
TLS everywhere
All traffic between decoys, dashboard and our backend is encrypted in transit.
bcrypt password hashing
Account passwords are stored only as salted bcrypt hashes — never in plain text.
Role-based access control
Dashboard permissions are scoped by role, so evidence and settings are on a need-to-touch basis.
Rate limiting
API and login endpoints are rate-limited against brute force and abuse.
Outbound-only
Decoys report out to us. You never open an inbound port for CyberSharcX.
User-space agent, no control
Where an agent is used at all, it runs in user space and never controls customer infrastructure.
Found something? Tell us. We’ll behave.
Report vulnerabilities to contact@cybersharcx.in with “SECURITY” in the subject line.
In progress, not achieved.
We are building toward SOC 2 and ISO 27001 readiness. We hold neither certification today, and you won’t find their logos anywhere on this site until we do.