Skip to content
ShopAssist Docs
Security

Responsible disclosure

How to report a security vulnerability in ShopAssist and what you can expect from us.

View as Markdown

Report vulnerabilities to security@coec.dk. Please include the affected URL or component, the steps to reproduce and the impact you expect. Do not include shopper personal data you may have obtained.

  • We acknowledge reports within 3 working days and keep you updated until the issue is fixed.
  • We will not take legal action against good-faith research that follows the rules of our disclosure policy.
  • Test only against your own accounts and stores. Do not degrade the service, access other merchants' data or use social engineering.

The full policy, scope and safe-harbour terms are on the disclosure policy page. Our security.txt lists the same contact.

Last updated on

Egress IP addresses

The static IP addresses ShopAssist connects to your store from, for firewall and WAF allowlists.

GDPR overview

Who is controller and processor for ShopAssist data, where data is processed and what you need to do as a merchant.