Security and Responsible Disclosure

Last updated: 9 November 2026

We take the security of our websites and our clients’ data seriously. If you find a vulnerability, please let us know so we can fix it.

How to report

Email deepak@browniemedia.co with the subject “Security report” and include the affected URL or system, steps to reproduce, the potential impact, and your contact details if you would like a reply.

In scope

• browniemedia.co and its subdomains, including app.browniemedia.co, hiring.browniemedia.co and edit.browniemedia.co

Out of scope

• Third-party services we use, such as Framer, Google, Meta and Cal.com (please report these to the provider)

• Social engineering or phishing of our team

• Denial-of-service attacks

• Physical attacks

• Spam

• Missing security headers with no practical impact

Please

• Test only against your own accounts.

• Do not access, change or delete other people’s data.

• Do not disrupt our services.

• Give us reasonable time to fix the issue before disclosing it publicly.

What we commit to

• Acknowledge your report within 5 business days.

• Keep you updated on our progress.

• Credit you for the finding if you would like.

• Not take legal action against good-faith research that follows this policy.

We do not currently run a paid bug bounty programme.