Security

We take the security of Clor and our users seriously. If you believe you've found a vulnerability, please report it to us so we can investigate and fix it.

Reporting a vulnerability

Email security@clor.com with a description of the issue and steps to reproduce. We'll acknowledge your report and keep you updated as we work on a fix.

Bug bounty

We do not run a paid bug bounty program at this time. We do welcome responsible disclosure and are grateful to researchers who help keep Clor and our users safe.

Responsible disclosure

Please give us a reasonable window to fix the issue before sharing it publicly, and avoid accessing data that isn't yours or disrupting service for other users while researching.

Contact

security@clor.com