Report a security issue
Found a security problem? Tell us.
Construction teams trust Conflo with their project records. If you've found a way that trust could be broken, we want to hear about it before anyone else does.
How to report
Email the security team.
Write to support@conflo.co. Please don't post the details publicly or send them through the demo form. It helps to include:
- What you found and where: the page, URL or request.
- Steps to reproduce it, or a short proof of concept.
- What someone could do with it, as far as you can tell.
- How to reach you, if you'd like to hear back.
What we ask
Look, but leave other people's data alone.
- Use your own accounts and test data. Don't open, change or delete anyone else's.
- Stop as soon as you've shown the problem exists, and tell us what you saw.
- Don't run automated scans that slow the service down, and don't try denial-of-service, spam, phishing or physical attacks.
- Give us a reasonable time to fix the problem before telling anyone else about it.
What to expect
A reply, and a fix.
- We read every report and reply to confirm we've received it.
- We tell you what we found and keep you updated while we work on a fix.
- We let you know when it's fixed, and credit you if you'd like.
- We don't offer paid rewards at this time.
If you act in good faith and follow this page, we'll treat your research as authorised and won't take action against you for it. This covers Conflo's own website and application; problems in services we rely on are best reported to those providers. The machine-readable version of this page is at /.well-known/security.txt.