TTechPSCSecurity Get the app
Responsible disclosure program

Security Hall of Fame

Students across Nepal trust TechPSC with their preparation. These researchers helped keep that trust by reporting issues privately and giving us time to fix them.

Meet the researchers → Report a vulnerability
3Researchers recognized
2026Program year
Private-firstCoordinated disclosure only
S
★ Top contributor · 2026

Sangharsha Upadhyaya

Developer & Security Researcher

Coordinated disclosure that helped TechPSC strengthen access control, platform privacy and student trust.

  • ✓Access-control hardening
    Reported a premium-access weakness and worked with us while it was fixed.
  • ✓Privacy hardening
    Reported a data-access rules concern that strengthened protection of user information.
2 reports · fixed
A

Ankit Yashodhara Ramesh Admane

Cyber Security Student · Security Researcher

Recognized researcher

Recognized for responsibly reporting a security concern privately to TechPSC.

2026
A

Ajay Verma

Security Researcher

Recognized researcher

Recognized for responsibly reporting a security concern privately to TechPSC.

2026
Your name here

Found something?

Report it privately and responsibly. Valid reports are recognized here once the fix is live.

Report a vulnerability →
Recognition, not bounty. TechPSC does not offer monetary rewards at this time. Valid reports are acknowledged publicly after the issue is fixed and safe to disclose. We only publish high-level summaries, never technical details.
How it works

From report to recognition.

A simple, private process that keeps students safe while issues are fixed.

Report privately

Email clear steps, affected area and impact. Never include real user data.

We confirm

The team reproduces the issue with test accounts and assesses its impact.

We fix

A fix is built, tested and deployed to the app, website or backend.

You're recognized

With your consent, your name and links are added to this Hall of Fame.

Scope & rules

Test safely. Protect students.

Good-faith research within these rules is welcome. Please give us reasonable time to fix before any public discussion.

✓In scope

  • ✓TechPSC Android app (com.techpsc.nepal)
  • ✓techpsc.com and its subdomains
  • ✓Access to premium content without a valid Pass
  • ✓Exposure of user data or account takeover

✕Not allowed

  • ✕Denial-of-service, load or spam testing
  • ✕Accessing, downloading or sharing real users' data
  • ✕Mass scraping, mail bombing or payment abuse
  • ✕Social engineering of staff or students
Report a vulnerability

Help us keep students safe.

Use the subject line Responsible Disclosure Report. We read every report and reply as soon as we can.

Email the security team → security.txt
Send to official@techpsc.com
  • Affected area and clear reproduction steps
  • Impact, with sensitive values blurred
  • A test account, not real users
  • Your preferred name and links for credit