CoFoldersVulnerability disclosure
How to report a potential security issue privately.
This version has not been published as an effective legal policy. Operator: Cofolders. Contact: support@cofolders.com.
1. Contact
Send a minimal, redacted report to support@cofolders.com. Include the affected URL or component, safe reproduction steps, approximate time and impact. A private account support request can also be categorized as Security.
2. Protect users
Do not collect another person’s data, expose tokens or disrupt service to prove a finding. Stop if you encounter personal or confidential material and describe the issue without attaching that material.
3. Authorization and disclosure
This draft does not authorize active security testing, create a safe-harbor promise or offer a bug bounty. Obtain written authorization before testing and coordinate any disclosure with the service owner. No fixed response deadline is promised here.
Still need help?
Send a private request or contact support@cofolders.com.