Report a Security Vulnerability
We take security seriously and appreciate responsible disclosure. Help us keep CopyRefine secure for everyone.
Email Report
Send detailed vulnerability reports by email; put "Security" in the subject
info@copyrefine.proSensitive Details
Describe the issue first without secrets or other people's data. We reply by email and agree with you how to share anything sensitive.
Responsible Disclosure Guidelines
Provide detailed information about the vulnerability
Include steps to reproduce the issue
Wait for our response before public disclosure
Do not access or modify user data
Do not perform DoS attacks
Act in good faith and avoid privacy violations
What to Expect
Initial Response
By email
Acknowledgment of your report
Triage
Case by case
Validation and severity assessment
Fix Development
By severity
Based on severity and complexity
Resolution
As needed
Patch deployment and notification
Thank You
We are grateful to everyone who reports a vulnerability responsibly. There is no paid bounty programme.