As a security services company, S. Tiger Security Service (STSS) takes the security of its website, https://stss.in.net, and of the information shared through it seriously. This policy describes the measures we have in place and what we expect from users of the website.
Secure Connection (HTTPS/TLS)
All pages of this website are served over HTTPS, using Transport Layer Security (TLS) encryption, so that information exchanged between your browser and our website, including enquiry form data, is protected in transit. Look for the padlock symbol in your browser's address bar. Our official website address is https://stss.in.net; please be cautious of websites or emails that only resemble it.
Security Headers and Safe Content
- We use HTTP security headers that instruct browsers to apply protective measures, such as restricting which content can be loaded and preventing our pages from being framed by other websites.
- The website does not host or serve malicious scripts, unwanted pop-ups or hidden downloads.
- Files in the Downloads section are PDF brochures. We will never ask you to download or install software from this website.
Restricted Administrative Access
The website is hosted on Google Firebase. Its content management (admin) area can be accessed only by authorised STSS personnel who sign in through Firebase Authentication. Database and storage security rules restrict who can read or change stored data, and enquiry details submitted by visitors are not publicly accessible. For more about how we handle personal data, see our Privacy Policy.
Prohibited Activities
Users must not attempt to gain unauthorised access to this website or its systems. In particular, you must not:
- attempt to log in to the admin area or bypass authentication;
- probe, scan or test the website for vulnerabilities in a way that affects its availability or other users' data;
- inject code, upload malware or attempt to alter website content;
- overload the website through denial-of-service attacks or excessive automated requests;
- harvest or download data that is not intended to be public.
Such actions may be offences under the Information Technology Act, 2000, including Sections 43 and 66, and other applicable laws. We may log related activity, including IP addresses, and report it to the appropriate law enforcement authorities.
Reporting a Vulnerability Responsibly
If you believe you have found a security vulnerability on this website, please report it to info@stss.in.net with the subject "Security Vulnerability Report". Please include:
- a description of the issue and the affected page (URL);
- the steps needed to reproduce it;
- the possible impact;
- your name and contact details.
While investigating and reporting, please:
- do not access, change or delete data that does not belong to you;
- do not disrupt the website or degrade the experience of other users;
- do not attempt social engineering or phishing of our staff, or physical access to our offices;
- keep the details confidential until we have had a reasonable opportunity to fix the issue.
We will acknowledge your report, investigate it and take suitable corrective action. Reports made in good faith and in line with this policy will be treated as responsible disclosure.
Staying Safe Online
STSS will never ask you for passwords or one-time passwords (OTPs) by email, phone or message. If you receive a suspicious communication claiming to be from STSS, please verify it by calling +91 94296 94814 or writing to info@stss.in.net before responding.
Changes to This Policy
We may update this policy as our website and security practices evolve. Updates will be posted on this page. This policy is governed by the laws of India and subject to the jurisdiction of the courts at Pune, Maharashtra.
