Security Policy

Last Updated: July 26, 2026

Welcome to CV. Putra Farma Yogyakarta (“Putra Farma Yogyakarta”, “we”, “our”, or “us”), accessible through https://www.putrafarmayogyakarta.co.id.

As a company specializing in powdered beverage manufacturing, health drinks, beauty drinks, coffee products, fiber beverages, and private label manufacturing services, we are committed to protecting the security of our website, systems, customers, business partners, and digital services.

This Security Policy explains how we protect our systems, what activities are prohibited, how security vulnerabilities should be reported, and the actions we may take to safeguard our infrastructure from unauthorized or malicious activities.

1. Purpose

The purpose of this Security Policy is to:

• Protect the security and integrity of Putra Farma Yogyakarta’s digital infrastructure.
• Safeguard customer, prospective client, vendor, and internal business information.
• Define acceptable and prohibited activities when accessing our website.
• Establish a responsible vulnerability disclosure process.
• Promote a secure and trustworthy online environment for all users.

2. Prohibited Activities

Users are strictly prohibited from engaging in any of the following activities:

• Accessing servers, databases, administrative panels, APIs, or internal systems without authorization.
• Attempting to obtain unauthorized privileges or administrative access.
• Conducting brute-force attacks, credential stuffing, or automated login attempts.
• Attempting to exploit vulnerabilities, including but not limited to:
  • SQL Injection
  • Cross-Site Scripting (XSS)
  • Cross-Site Request Forgery (CSRF)
  • Command Injection
  • Server-Side Request Forgery (SSRF)
  • Remote Code Execution (RCE)
  • Local or Remote File Inclusion
  • Directory Traversal
  • XML External Entity (XXE)
  • Authentication bypass or privilege escalation
• Performing unauthorized vulnerability scanning, reconnaissance, or enumeration against our infrastructure.
• Uploading or distributing malware, ransomware, trojans, viruses, web shells, or any malicious software.
• Launching Denial of Service (DoS) or Distributed Denial of Service (DDoS) attacks.
• Accessing, downloading, copying, or disclosing confidential company information or customer data without authorization.
• Altering, deleting, encrypting, or damaging company data or systems.
• Excessively scraping website content in a manner that negatively affects service availability or performance.
• Using automated bots or scripts that generate unreasonable system load.
• Conducting phishing, social engineering, or impersonation targeting our employees, customers, or partners.
• Exploiting discovered vulnerabilities for personal gain or unauthorized purposes.

3. Security Monitoring and Logging

To maintain the security and reliability of our services, we may collect and retain technical logs, including but not limited to:

• IP addresses & Date and time of access
• Browser type, Operating system & Device information
• Requested URLs, Login activity & API requests
• HTTP request information & Security-related system logs

These logs may be used for detecting suspicious or malicious activities, preventing unauthorized access, investigating security incidents, performing internal security audits, maintaining system performance, and complying with applicable legal obligations.

4. Protective Measures

If suspicious or malicious activities are detected, Putra Farma Yogyakarta reserves the right to block IP addresses, restrict or terminate user access, suspend user accounts, invalidate active login sessions, restrict system access, preserve digital evidence, conduct internal investigations, and cooperate with hosting providers, cybersecurity vendors, or law enforcement authorities when appropriate.

5. Responsible Vulnerability Disclosure

We appreciate the efforts of security researchers and members of the cybersecurity community who help improve the security of our services.

If you discover a potential security vulnerability affecting www.putrafarmayogyakarta.co.id, we kindly ask that you:

• Report the issue privately to us.
• Avoid exploiting the vulnerability.
• Do not access customer data or confidential company information.
• Do not modify, delete, or extract any data.
• Avoid disrupting our services or business operations.
• Allow us a reasonable period to investigate and remediate the issue before any public disclosure.

Please submit vulnerability reports to: seospecialistpfy@gmail.com

When possible, include a description of the vulnerability, steps to reproduce, the affected URL, supporting evidence (screenshots/videos), potential impact, and suggested remediation (optional).

6. Unauthorized Security Testing

This Security Policy does not grant permission to perform Penetration Testing, Vulnerability Assessments, Vulnerability Scanning, Exploit Testing, Load Testing, Stress Testing, or Security Audits against any website, application, API, server, or infrastructure owned or operated by Putra Farma Yogyakarta without prior written authorization.

7. Legal Compliance

All users are expected to comply with the applicable laws and regulations of the Republic of Indonesia. If unauthorized access, data theft, system abuse, sabotage, or other unlawful activities are detected, Putra Farma Yogyakarta reserves the right to conduct internal investigations, preserve evidence, restrict access, and cooperate with law enforcement agencies.

8. Limitation of Liability

We implement reasonable administrative, technical, and organizational safeguards to protect our website. However, no information system can be guaranteed to be completely secure. Accordingly, Putra Farma Yogyakarta shall not be liable for losses resulting from unauthorized actions by third parties, events beyond our reasonable control, or force majeure circumstances.

9. Changes to This Security Policy

We may update this Security Policy from time to time to reflect technological developments, operational changes, security improvements, or legal requirements. The latest version will always be published on this page along with its effective date.

10. Contact Us

If you have questions regarding this Security Policy or would like to report a security vulnerability, please contact us:

Closing Statement

Putra Farma Yogyakarta values the contributions of customers, partners, and the global cybersecurity community in helping us maintain a secure and reliable digital environment. Responsible vulnerability disclosure plays an important role in strengthening our security and protecting everyone who relies on our services.