At Inner Spark Creative, we take the security of our clients’ websites and digital platforms seriously. As a full-service digital marketing and web development agency, we recognize that maintaining a safe online presence is essential to protecting our clients’ brands, customers, and business operations.

This Security Policy outlines how we manage, receive, and respond to vulnerability reports in accordance with RFC 9116 security.txt standards.

🔒 Our Commitment to Security

• We follow industry best practices in web development, hosting, and digital marketing technology.

• We apply regular updates to content management systems (such as Joomla and WordPress), plugins, and third-party software.

• We implement SSL/TLS encryption, secure DNS management, and firewall protections across the sites we manage.

• We continuously monitor new threats and update our strategies to minimize risks.

📢 Reporting a Security Issue

If you discover a vulnerability or security concern on a site we manage, we encourage you to responsibly disclose it to us.

• Use the contact methods listed in our security.txt file or use our contact form.

• Please provide as much detail as possible, including:

  • A clear description of the issue.

  • Steps to reproduce the vulnerability.

  • Any potential impact you believe it may have.

We ask that you do not publicly disclose vulnerabilities until we’ve had the opportunity to investigate and remediate the issue.

⚡ How We Respond

• Acknowledgment: We will confirm receipt of your report within 3 business days.

• Assessment: Our team will validate and prioritize the issue.

• Remediation: If confirmed, we’ll work quickly to resolve it and coordinate with the affected client.

• Follow-up: We’ll notify you once the issue has been addressed.

🎯 Scope

This policy applies to all websites, web applications, and digital assets that are developed, hosted, or maintained by Inner Spark Creative on behalf of our clients.

If you’re unsure whether a property is within scope, please reach out via our contact page.

✅ Responsible Disclosure Guidelines

We request that researchers:

• Give us a reasonable time to remediate before public disclosure.

• Avoid accessing or modifying client data.

• Do not use automated scans that could disrupt service.

We are committed to handling all reports professionally, fairly, and respectfully.

🚀 Our Role as a Trusted Agency

As a leading digital marketing agency and web development partner, Inner Spark Creative is dedicated to:

• Building secure websites and eCommerce platforms.

• Implementing secure SEO strategies, advertising campaigns, and analytics tracking.

• Protecting client reputation and consumer trust.

This page demonstrates our ongoing commitment to cybersecurity, data protection, and safe digital growth.