Security & Responsible Disclosure
सुरक्षा नीति
Reporting a security problem on our website
We take the security of this website and of the people who use it seriously. If you believe you have found a security vulnerability in shrijanshilnepal.org.np, please tell us privately so we can fix it before anyone can misuse it.
How to report
Email [email protected] with the subject line "Security report". Please include:
- the page or URL affected and the type of problem;
- clear steps to reproduce it, and screenshots if helpful;
- what an attacker could do with it, as you understand it;
- how we can reach you, and whether you'd like to be credited.
This policy is also published in machine-readable form at /.well-known/security.txt.
What we ask of you
- Give us reasonable time to fix the problem before telling anyone else.
- Only test as far as needed to show the problem exists. Do not view, change or delete other people's data, and stop and tell us if you reach any personal information.
- Do not run denial-of-service or high-volume automated scans, send spam through our forms, or use social engineering, phishing or physical attacks against our staff, volunteers or offices.
- Do not test against the third-party services we link to (such as VirusTotal, Have I Been Pwned or payment providers) - report issues with those to their owners.
What we commit to
- We will acknowledge your report and keep you updated while we investigate and fix it.
- If you act in good faith and follow this policy, we will not take legal action against you or ask the police to, and we will treat your report as authorised research.
- With your permission, we'll thank you publicly once the issue is fixed.
We are a small community non-profit and do not run a paid bug bounty programme.
How our Cyber Safety tools protect your privacy
| Tool | What leaves your device | Who receives it |
|---|---|---|
| Free Virus Check | Only the file's SHA-256 fingerprint, and only when you press "Check on VirusTotal". The file itself is never uploaded. | VirusTotal (Google) |
| Suspicious Link Checker | Nothing for the warning-sign check. The link is sent only if you press the VirusTotal or Google Safe Browsing buttons. | VirusTotal / Google |
| Password Check | Nothing for the strength meter. For the leak check, the first 5 characters of the password's SHA-1 hash - not enough to reveal the password. | Have I Been Pwned |
| Email Breach Check | The email address you type, sent from your browser straight to the breach-search service when you press "Check". Not sent to our server. | XposedOrNot |
| Spot the Scam Quiz | Nothing - answers stay in your browser. | No one |
Our servers do not receive or store the files, links or passwords you check with these tools. Standard web server logs record that a page was visited, as on any website - see our Privacy Policy.
Already lost money or been hacked?
Call your bank or wallet provider immediately to block the account, then report it to the Nepal Police Cyber Bureau. Our step-by-step reporting guide lists what evidence to keep and who to contact.
More free tools and guides
Free toolFree Virus Checkनिःशुल्क भाइरस जाँचCheck a file against 70+ antivirus engines without uploading it.Free toolSuspicious Link Checkerशंकास्पद लिङ्क जाँचSpot fake eSewa, Khalti, bank and Facebook links before you tap.Free toolPassword Strength & Leak Checkपासवर्ड बलियो छ कि छैनSee how strong a password is and whether it has leaked online.Free toolEmail Breach Checkईमेल चुहावट जाँचFind out if your email address was leaked in a data breach.Free toolSpot the Scam Quizठगी चिन्नुहोस् - क्विज8 real-style messages from Nepal. Can you tell which are scams?GuideCommon Online Scams in Nepalनेपालमा हुने अनलाइन ठगीWallet KYC, fake jobs abroad, lottery, hacked Messenger and more.GuideHow to Report Cybercrime in Nepalसाइबर अपराधको उजुरी कसरी दिनेWhat to do first, what evidence to keep and where to complain.
This Cyber Safety Centre is a free public-awareness service of Shrijanshil Nepal, a non-profit organization in Nepal. The tools give guidance, not a guarantee - no checker can prove that a file or link is safe.