Last reviewed: 20 July 2026
BricksGenius is a trading name operated by Arnab Mohapatra, an individual based in India. Security contact: arnab@bricksgenius.com.
Responsible disclosure
We welcome good-faith reports of security vulnerabilities in our public website and systems we operate. Please email a clear description of the issue, steps to reproduce, affected URLs, and any proof-of-concept that is non-destructive.
Please do not
- Access, modify, or delete data that is not yours
- Perform destructive testing, denial-of-service, or spam
- Target client production sites without the client’s written authorisation
- Social-engineer our clients or their customers
- Publicly disclose a vulnerability before we have had a reasonable chance to remediate
Response expectations
We aim to acknowledge valid reports within 7 business days. We do not operate a paid bug bounty and do not guarantee a bounty or safe-harbour beyond good-faith coordination. Scope is limited to systems we own or are authorised to test; client environments require client permission.
Client data
Protecting client credentials and personal data on client sites is a core obligation during engagements. Reports that involve client data should avoid including unnecessary personal information in the email body; share samples carefully.
This page intentionally omits infrastructure diagrams, software versions of internal tooling, and other details that would increase attack risk.