Security.
If you believe you have found a vulnerability in FarLink, we want to hear from you.
Report a vulnerability
Email contact@granwel.com with “FarLink security” in the subject.
- Describe the problem and the steps to reproduce it.
- Say which app, platform and version, or which part of FarLink Cloud, it affects.
- Include any proof of concept, and how we can reach you.
Good-faith research
Under section 10.4 of the Terms of Service, please:
- do not exploit the vulnerability;
- do not disclose it publicly before we have had a reasonable chance to fix it; and
- do not access, change or keep other people’s data.
Good-faith research that follows these rules will not be treated as a breach of the Terms of Service.
The scope covers the FarLink apps for iPhone, iPad, Mac, Windows and Linux, FarLink Helper, FarLink Cloud and this website. Only test against computers and accounts you own. Denial-of-service testing, social engineering and physical attacks are out of scope.
How FarLink protects you
Encrypted in transit
Connections between your devices and FarLink Cloud use TLS.
End-to-end encrypted sync
Saved computers are sealed on your device with AES-GCM. The vault key never leaves your devices and your recovery phrase.
Nothing kept from sessions
Relayed screens, input and clipboard are held in memory only to pass them on, then discarded.
Short-lived access
Each relayed session starts with a single-use ticket valid for 30 seconds. Idle sessions end after 10 minutes.
The Privacy Policy describes every system in detail. Machine-readable contact details are in security.txt.