Snapshot 96860

Document
Security page
URL
https://www.nucleussoftware.com/responsible-disclosure
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
134702 bytes
SHA-256 (raw)
09a0687a872fd603f0be2e19fa2df0baa0f01fd286b6c3b93db73abf4e39f363
SHA-256 (normalized text)
fb6639a736dadd05d189c0697df563d33bbfba818eaebeca62910d476497aa02

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Responsbile Disclosure Policy | Nucleus Software
Our Platforms
FinnOne Neo®
FinnAxia®
FinnOne Neo®
Transforming Digital Lending for Your Financial Institutions
Compare Versions
Compare World-class, Industry-defining Features Today.
Learn more
FinnOne Neo® CAS
Robust Digital Lending for Superior Loan Origination Journeys.
Learn more
FinnOne Neo® LMS
Unlock Efficiency in Loan Servicing for Enhanced Customer Experience
Learn more
FinnOne Neo® Collections
Simplified and Intelligent Debt Collection Platform
Learn more
FinnAxia®
Streamlining Transaction Banking for Corporates.
FinnAxia® FSCM
Unlock Working Capital, Strengthen Relationships, Fuel Business Growth
Learn more
FinnAxia® Global Receivables
Simplify Collections. Strengthen Liquidity. Scale Confidently.
Learn more
Our Products
Lending
Transaction Banking
Financial Inclusion
Technology
Lending
An advanced technology platform, designed to deliver agile and efficient solutions while drastically reducing the cost of operations.
Gold Lending
Manage the complete gold loan lifecycle through a single digital platform.
Learn more
Corporate Lending
Enhanced Agility via Digitizing SME and Corporate Lending.
Learn more
Retail Lending
End-to-end digital lending across the entire lifecycle of origination, servicing & collections.
Learn more
Islamic Finance
Interest Free Banking Governed by Shariah Principles.
Learn more
Automotive Lending
Advanced Automotive Lending Software for complete loan life cycle management.
Learn more
Transaction Banking
Digital Transaction Banking suite that is modular for a composable banking experience.
Integrated Transaction Banking Suite – FinnAxia®
FinnAxia®, End-to-end Global Transaction Banking Suite; optimally manages Receivables, Payments, Liquidity, Financial Supply Chains and Corporate Trade.
Learn more
Financial Inclusion
Ensure responsible Lending with our API-backed products for easy & seamless connectivity to the financial ecosystem.
FinnOne Neo® mFin
Easy, fast and digitized access to microcredit, anytime, anywhere.
Learn more
Payse®
An offline and online digital cash solution designed to democratize finance.
Learn more
Technology
Modern Technology Platform to Engage and Empower Customers.
About Us
Our Team
ESG at Nucleus
Explore more
Events & Webinars
Awards
Newsroom
Investor Relations
Life at Nucleus
Our Values
Employee Stories
Open Positions
Become a Partner
Nucleus Partner Marketplace
AWS Marketplace
Customer Success Stories
Resources
Customer Connects
Life at Nucleus
Our Values
Employee Stories
Open Positions
Home
AI for Services
Platforms
Solutions
Services
Technology
Insights
Company
Careers
Partners
Blogs
Back
Platforms
FinnOne Neo®
FinnAxia®
Back
Solutions
Lending
Transaction Banking
Financial Inclusion
Technology
Back
Insights
Customer Success Stories
Resources
Customer Connects
Back
Company
About Us
Our Team
ESG at Nucleus
Events & Webinars
Awards
Newsroom
Investor Relations
Back
Careers
Life at Nucleus
Our Values
Employee stories
Open Positions
Back
Partners
Become a Partner
Nucleus Partner Marketplace
AWS Marketplace
Back
Lending
Gold Lending
Corporate Lending
Retail Lending
Islamic Finance
Automotive Lending
Back
Transaction Banking
FinnAxia®
Back
Financial Inclusion
FinnOne Neo® mFin
Payse®
Back
FinnOne Neo®
Compare Versions
FinnOne Neo® CAS
FinnOne Neo® LMS
FinnOne Neo® Collections
Back
FinnAxia®
FinnAxia® FSCM
FinnAxia® Global Receivables
Request demo Contact Us
Copyright © 2026 Nucleus Software Exports Ltd. All rights reserved.
Responsible Disclosure
At Nucleus Software, security is fundamental to the trust our customers, partners, and stakeholders place in us. We are committed to protecting the confidentiality, integrity, and availability of our digital assets, applications, and services.
We welcome reports from security researchers, customers, partners, and members of the public who identify potential security vulnerabilities in systems owned and operated by Nucleus Software. Responsible disclosure helps us strengthen our security posture and better protect the organizations that rely on our solutions.
If you believe you have discovered a security vulnerability, we encourage you to report it responsibly using the process outlined below.
Reporting a Security Vulnerability
If you identify a potential security vulnerability affecting a Nucleus Software website, application, service, or digital asset, please report it by emailing:
Security Contact: Report-External-vulnerability@nucleussoftware.com
To help us investigate your report efficiently, please include:
A clear description of the vulnerability.
The affected URL, application, system, or service.
Step-by-step instructions to reproduce the issue.
Supporting evidence such as screenshots, logs, or proof-of-concept details.
The potential impact of the vulnerability.
Your name and contact information.
We will review all reports and investigate validated security concerns in accordance with our internal security processes.
Scope
This Responsible Disclosure Program applies to systems and services owned and operated by Nucleus Software, including:
www.nucleussoftware.com and associated subdomains.
Publicly accessible web applications and APIs operated by Nucleus Software.
Mobile applications published and maintained by Nucleus Software.
Other publicly accessible digital services under the control of Nucleus Software.
Product Security Reporting
Nucleus Software provides technology solutions to banks, financial institutions, and enterprises globally, including products such as FinnOne Neo® and FinnAxia®.
If you believe you have identified a vulnerability affecting a Nucleus Software product deployment, please report the issue to us with complete details. We will coordinate the investigation and remediation process with the appropriate stakeholders and affected parties, where applicable.
Out of Scope
The following activities and findings are generally considered outside the scope of this Responsible Disclosure Program:
Vulnerabilities affecting third-party systems, platforms, or services not owned or controlled by Nucleus Software.
Social engineering, phishing, impersonation, or physical security attacks.
Denial-of-Service (DoS) or Distributed Denial-of-Service (DDoS) testing.
Spam, unsolicited bulk messaging, or email abuse.
Testing that may disrupt, degrade, or impact the availability of Nucleus Software systems or services.
Activities that result in unauthorized access to, modification of, or destruction of customer, partner, employee, or company data
Guidelines for Security Researchers
We request that all security research be conducted responsibly and in good faith.
When reporting vulnerabilities, please:
Act with the intention of improving security.
Limit testing to activities necessary to identify and demonstrate the vulnerability.
Avoid accessing, modifying, deleting, or disclosing data that does not belong to you.
Respect the privacy of our customers, partners, employees, and users.
Avoid actions that could impact the availability, performance, or integrity of our systems.
Immediately stop testing and notify us if you inadvertently access sensitive information.
Provide sufficient information to allow us to reproduce and validate the issue.
Please Do Not
Access customer, employee, or partner information beyond what is required to demonstrate a vulnerability.
Modify, destroy, or exfiltrate data.
Perform Denial-of-Service testing or service disruption activities.
Use phishing, social engineering, or physical intrusion techniques.
Publicly disclose vulnerability details before Nucleus Software has had a reasonable opportunity to investigate and address the issue.
Our Commitment
When a vulnerability report is submitted in accordance with this Responsible Disclosure statement, Nucleus Software will:
Acknowledge and review the reported issue.
Assess the validity and potential impact of the vulnerability.
Work to remediate confirmed vulnerabilities based on risk, severity, and business impact.
Engage with the reporting party where additional information is required.
Notify the reporting party when the investigation has been completed, where appropriate.
Safe Harbour
Nucleus Software supports responsible security research conducted in good faith.
We will not initiate legal action against individuals who:
Report vulnerabilities responsibly and in accordance with this disclosure statement.
Do not exploit vulnerabilities beyond what is reasonably necessary to demonstrate their existence.
Do not access, misuse, alter, or disclose confidential information.
Do not intentionally disrupt or degrade our services.
Activities that violate applicable laws, compromise customer data, disrupt services, or cause harm to Nucleus Software, its customers, partners, or third parties are not covered under this Safe Harbour statement.
Contact Information
Security Vulnerability Reporting – Report-External-vulnerability@nucleussoftware.com
Thank you for helping us maintain a secure and resilient digital environment for our customers, partners, and stakeholders.
Chat with our Experts
Nucleus Software
Typically replies within a few hours
Hi! 👋 Welcome to Nucleus Software
How can we help you today?
Lending Solutions
Transaction Banking Solutions
Request a Demo
Product Information
Partnership Enquiry
Customer Support
Continue on WhatsApp
Talk to Our Experts