#  Security Policy – Inner Spark Creative

 Written by Inner Spark Web Content Team.

At **Inner Spark Creative**, we take the security of our clients’ websites and digital platforms seriously. As a full-service **[digital marketing](https://www.innersparkcreative.com/advertising-services/digital-marketing) and [web development](https://www.innersparkcreative.com/advertising-services/web-development) agency**, we recognize that maintaining a safe online presence is essential to protecting our clients’ brands, customers, and business operations.

This Security Policy outlines how we manage, receive, and respond to vulnerability reports in accordance with RFC 9116 security.txt standards.

---

### 🔒 Our Commitment to Security

- We follow **industry best practices** in web development, hosting, and digital [marketing technology](https://www.innersparkcreative.com/advertising-services/web-and-technology).
- We apply **regular updates** to content management systems (such as Joomla and WordPress), plugins, and third-party software.
- We implement **SSL/TLS encryption**, **secure DNS management**, and **firewall protections** across the sites we manage.
- We continuously monitor new threats and update our strategies to minimize risks.

---

### 📢 Reporting a Security Issue

If you discover a vulnerability or security concern on a site we manage, we encourage you to **responsibly disclose** it to us.

- Use the contact methods listed in our security.txt file or use our [contact form](https://www.innersparkcreative.com/about-us/contact-us).
- Please provide as much detail as possible, including:

    - A clear description of the issue.
    - Steps to reproduce the vulnerability.
    - Any potential impact you believe it may have.

We ask that you **do not publicly disclose** vulnerabilities until we’ve had the opportunity to investigate and remediate the issue.

---

### ⚡ How We Respond

- **Acknowledgment:** We will confirm receipt of your report within 3 business days.
- **Assessment:** Our team will validate and prioritize the issue.
- **Remediation:** If confirmed, we’ll work quickly to resolve it and coordinate with the affected client.
- **Follow-up:** We’ll notify you once the issue has been addressed.

---

### 🎯 Scope

This policy applies to all websites, web applications, and digital assets that are **developed, hosted, or maintained by Inner Spark Creative** on behalf of our clients.

If you’re unsure whether a property is within scope, please reach out via our [contact page](https://www.innersparkcreative.com/about-us/contact-us).

---

### ✅ Responsible Disclosure Guidelines

We request that researchers:

- Give us a reasonable time to remediate before public disclosure.
- Avoid accessing or modifying client data.
- Do not use automated scans that could disrupt service.

We are committed to handling all reports **professionally, fairly, and respectfully**.

---

### 🚀 Our Role as a Trusted Agency

As a leading **digital [marketing agency](https://www.innersparkcreative.com/)** and **web development partner**, Inner Spark Creative is dedicated to:

- Building secure websites and eCommerce platforms.
- Implementing secure **[SEO](https://www.innersparkcreative.com/advertising-services/search-engine-optimization) strategies**, **advertising campaigns**, and **analytics tracking**.
- Protecting client reputation and consumer trust.

This page demonstrates our ongoing **commitment to cybersecurity, data protection, and safe digital growth**.