Report a security concern
Contact CoFolders privately and avoid exposing user data.
Report privately
Email support@cofolders.com or choose the Security category in an account support request. Include the affected deployment URL, time, safe reproduction steps and the potential impact.
Do not include secrets
Redact passwords, tokens, session cookies and unrelated personal data. Do not access another person’s account, export private data or interrupt production traffic to demonstrate a finding.
Testing permission
This contact channel does not authorize penetration testing or promise a bounty. Obtain written authorization for any active testing and use the coordinated disclosure process for sensitive findings.
Was this article helpful?
Still need help?
Send a private request or contact support@cofolders.com.