Security and trust
What we do, and what we do not claim.
We would rather tell you exactly where things stand than show you a badge. This page covers this website, purchases and our products.
This website
- Served over HTTPS with a strict Content-Security-Policy, HSTS and frame protection.
- No advertising trackers and no third-party analytics.
- The enquiry form opens your own email app; nothing you type is stored on our servers.
Purchases and downloads
- Payments are processed by Razorpay. Card and UPI details never reach our code.
- A purchase is released only after our server confirms the payment with Razorpay.
- Installers are delivered through personal links that expire, never as public files.
- Our Windows installers are not code-signed yet, so Windows SmartScreen shows a warning. Each product page publishes the SHA-256 checksum so you can verify the file.
Products and demos
- Every product page lists what is real, what the demo simulates and what is not built yet.
- Demos use fictional or synthetic data and never connect to customer systems.
- Vaultlyn's encryption has not been independently reviewed; do not store real secrets in it yet.
What we do not claim
InfraNerds holds no security certifications today. If your procurement needs specific controls, ask us and we will answer control by control.
Reporting a vulnerability
Email us with the details and steps to reproduce. Please give us reasonable time to fix the issue before you disclose it publicly.
Questions: hello@infranerds.com