COMPANY SECURITY • TIER 1

Security Charter

Last Updated: September 18, 2026 • Entity: TRIDEVS (Karjan, Vadodara, Gujarat, India)

Security at TRIDEVS in 30 Seconds

Minimal Attack Surface

We avoid unnecessary databases and bloated dependencies. What isn't collected cannot be breached.

Defense in Depth

Enforced TLS 1.3 encryption, automatic HSTS preload headers, strict frame clickjacking protection, and edge DDoS mitigation.

Safe Harbor Program

We welcome ethical security researchers. Responsible vulnerability disclosures to hello@tridevs.in receive legal safe harbor.

01.Security Engineering Philosophy

At TRIDEVS, security is not an administrative checkbox or a marketing slogan—it is a core architectural constraint. Our engineering methodology is governed by three non-negotiable principles:

Data Minimization

We reject speculative data harvesting. The most secure data store is the one that never needed to exist.

Local-First Paradigm

Where possible, computation and state live on user devices (e.g., Room DB), eliminating centralized honeypots.

Zero Bloat Supply Chain

We strictly audit and minimize third-party runtime dependencies, preventing supply-chain malware contamination.

02.Infrastructure Hardening & Edge Defenses

The production environment for tridevs.in is hosted on a globally distributed edge network backed by hardened infrastructure:

Encrypted in Transit (TLS 1.3 / HTTPS)

All HTTP traffic is automatically upgraded to HTTPS. Plaintext HTTP access is permanently blocked.

Strict HTTP Security Headers

Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Frame-Options: DENY (Anti-Clickjacking)
X-Content-Type-Options: nosniff (Anti-MIME Spoofing)
Permissions-Policy: camera=(), microphone=(), geolocation=()

Distributed Edge DDoS Shield

Automated traffic scrubbers protect our origin against Layer 3, 4, and 7 volumetric and application attacks.

03.Responsible Vulnerability Disclosure & Safe Harbor

We believe in working cooperatively with the global cybersecurity research community. If you identify a potential security vulnerability on any TRIDEVS digital property, we encourage you to report it to us immediately.

Our Safe Harbor Commitment

If you conduct your research in good faith and adhere to the following principles, TRIDEVS will consider your research authorized, will not pursue legal action, and will work with you to remediate the vulnerability promptly:

Provide a reasonable amount of time to resolve the issue before disclosing it publicly.
Do not access, modify, or destroy user data or degrade system performance (no DoS attacks).
Do not attempt physical attacks, social engineering, or phishing against founders or operators.
Execute testing strictly against non-destructive proof-of-concept boundaries.

04.How to Report a Security Concern

Please send your vulnerability report directly to our security inbox:

Security Inquiries: hello@tridevs.in

Entity: TRIDEVS (Karjan, Vadodara, Gujarat, India)

Initial Response SLA: Within 48 hours

Please include detailed steps to reproduce, affected endpoints, and impact assessment. We acknowledge and thank ethical researchers who help keep our ecosystem secure.