If you have found a vulnerability in SSAyush, tell us before you tell anyone else. Write to the support address on this site with enough detail to reproduce it.

We acknowledge within two working days, tell you what we have found within ten, and tell you when it is fixed. We will not pursue anyone who reports a vulnerability in good faith and does not access, alter or retain data belonging to a hospital.

Please do not run automated scanning against a live hospital's subdomain. Ask us and we will give you somewhere to test.