Security

CuriousDevs is a pre-launch, founding-stage team. We are not currently SOC 2 or ISO 27001 certified. Where those frameworks are mentioned, they describe regulatory or compliance frameworks a given scenario touches, not certifications CuriousDevs holds. We think that distinction matters enough to state it twice.

• Served entirely over HTTPS/TLS.
• No cookies, analytics, or third-party tracking scripts (see our Privacy Policy).
• Contact, booking, and careers submissions are sent by email over an authenticated SMTP connection and are not stored in a database.
• Resume attachments are capped at 8MB and are validated on both the browser and server before being accepted.

If you find a security issue on this website or in anything we've published, we want to know before anyone else does. Email hello@curiousdevs.com with the subject line "Security report" and a way to reach you. We'll acknowledge within one business day. We don't yet run a paid bug bounty — we intend to once a paid product is live — but we will credit you publicly if you'd like, and we won't pursue legal action against good-faith, non-destructive research.

As our work grows, our plan is to pursue SOC 2 Type II, complete a third-party penetration test, and publish a technical security overview. None of that exists yet; this line will be updated the moment any of it does, not before.

hello@curiousdevs.com · CuriousDevs, Gurugram, India.