Security
Found a security problem in Fompi? Tell us. We read every report and reply to each one.
How to report
Email fompi@solongate.com with “Security” in the subject. Please include:
- What you found and where: the app and its version, Fompi for Chrome, or the page on fompi.app.
- Steps to reproduce it, and what someone could do with it.
- Your operating system and browser, if they matter.
- How you would like to be credited, or that you would rather not be.
Please keep the details between us until we have fixed it, and give us a reasonable time to do that, usually up to 90 days.
What this covers
- Fompi for Mac and Fompi for Windows.
- Fompi for Chrome.
- fompi.app, including sign-in, your account page and buying Fompi Pro.
Payments run on Stripe and email on Resend. Problems in those services go to them directly, though we are glad to hear about anything that affects Fompi.
Good-faith research
We won’t take legal action against good-faith research that follows this page. That means testing only your own accounts and devices, not reading or changing other people’s data, stopping once you have shown the problem, and telling us first.
What happens next
We confirm we got your report within 3 business days, keep you posted while we work on it, and tell you when the fix ships. We don’t pay bounties yet. If you would like, we will thank you by name on this page once the fix is out.
Out of scope
- Denial of service, load testing or anything that slows the site down for others.
- Social engineering, phishing or physical attacks on our team or customers.
- Spam, including sending email through our forms.
- Reports from automated scanners with no shown impact.
SolonGate LLC, 112 Capitol Trail, Suite A1253, Newark, DE 19711, USA. Our machine-readable contact is at /.well-known/security.txt. For privacy questions, see the Privacy Policy.