Trust & Safety
Security services are easy to fake, which is exactly why a security site should be specific about its limits. This page is that: what we do, what we refuse to do, and how to check we are telling the truth.
If you have already lost money
Report it to the Indian cybercrime portal at cybercrime.gov.in or call 1930 as soon as possible, then tell your bank. The first few hours matter most, because a transfer that has not yet settled can sometimes still be held. Do that before anything else, including contacting us.
Our Security Promise
These are commitments, not marketing lines. Each one is something you can hold us to.
- We never ask for your password, OTP, recovery code or card details — for any reason.
- We only monitor, test or deploy against systems and premises you own or are authorised to control, with that authorisation in writing.
- We state what our platforms do not promise on the same page that sells them.
- Your data, logs and footage are collected only where monitoring requires it, and processed on-premise wherever you need it to be.
- Access we are granted is scoped per task, logged, and revocable by you at any time.
- We tell you when the honest answer is that you need less than you asked for.
What we will never do
- Test, scan or access any system without the owner's written authorisation
- Bypass, disable or defeat platform security or two-factor authentication
- Crack passwords, buy credentials or intercept OTPs
- Carry out covert surveillance of individuals, or facial identification of the public
- Guarantee recovery of an account, of data, or of money
- Negotiate or pay a ransom on your behalf
How to check that we mean it
Ask us for the written scope before anything starts, and check that it names exactly which systems we may touch and what we may do to them. Ask where processing happens and insist on on-premise if your policy requires it. Ask what the platform does not promise — every platform page on this site answers that in writing, and any vendor who cannot answer it verbally is telling you something.
If someone contacts you claiming to be us
We do not initiate contact. We reply to requests you sent us, from an address on our own domain, and we never ask for a credential in that reply. Anyone phoning or messaging you out of the blue as Mounteyes is impersonating us — do not pay them, do not install anything they send, and please report it to [email protected] so we can warn others.
Reporting a security issue in our own site
If you find a vulnerability here, email [email protected] with enough detail to reproduce it and give us a reasonable window to fix it before disclosing. We will not pursue action against good-faith research that stays within scope, avoids other people's data, and does not degrade the service for anyone else.