Vetra Systems & Technologies Ltd takes the security of our systems and client data seriously. This page describes our security practices and how to report a vulnerability.
1. Infrastructure Security
- All production systems are hosted on AWS with network-level isolation using VPCs and security groups.
- All data in transit is encrypted using TLS 1.2 or higher.
- All data at rest is encrypted using AES-256.
- We use containerised deployments (Docker + Docker Compose) to isolate services and limit the blast radius of any incident.
- Access to production systems is restricted to authorised personnel using key-based authentication and MFA.
2. Application Security
- Our Django applications follow OWASP security best practices including CSRF protection, SQL injection prevention via ORM, and XSS mitigation via template escaping.
- Dependencies are regularly audited for known vulnerabilities using automated scanning.
- All software releases undergo internal code review before deployment.
3. Blockchain Security
Our Vetra Model Farm product uses a dual-layer blockchain architecture (Hyperledger Fabric + Polygon EVM). Private keys for on-chain operations are stored in hardware security modules (HSMs) and never exposed in application code or logs.
4. Reporting a Vulnerability
If you discover a security vulnerability in any of our systems or products, please report it responsibly:
- Email: vetratechnologies@gmail.com
- Please include a clear description of the vulnerability, steps to reproduce it, and your contact details.
- We will acknowledge your report within 48 hours and aim to resolve confirmed vulnerabilities within 30 days.
- We ask that you do not publicly disclose the vulnerability until we have had the opportunity to remediate it.