Report a security or privacy vulnerability

How to report a security or privacy vulnerability

If you believe that you've discovered a security or privacy vulnerability that affects COROS   devices, software, or services, please report it directly to us via   product-security@coros.com.  

Reports should include the following information:

•Specific product and software version(s) that you believe are affected

•A technical description of the behavior that you observed and the behavior that you expected  

•The steps required to reproduce the issue

•A proof of concept or exploit

  After you submit the report via email, our team will respond within 15 business days. Please   contact us before sending any sensitive information. All confirmed security/vulnerability issues   will be fixed within 90 days via software updates. We will provide status updates at least once   every 30 days until the report is resolved or closed. Remediation priority and timing will be   determined according to the vulnerability's severity, exploitability, potential impact, the   products affected, and the availability of a safe fix.  

  Information about products not manufactured by COROS, or independent websites not controlled or   tested by COROS, is provided without recommendation or endorsement. COROS assumes no   responsibility with regard to the selection, performance, or use of third-party websites or   products. COROS makes no representations regarding third-party website accuracy or reliability.  

Published Date: September 9, 2026