Security

If you have found a security problem in an oncut product, we want to hear about it. This page covers oncut KeyLang, oncut Prism, the oncut License Manager, and the servers they use for licensing (activation.oncut.gr and the delivery of license keys).

How to report

Email support@oncut.gr with "Security" in the subject. Please do not report a security problem in a public issue or forum, so that users can get a fix before the problem is known.

Tell us, as far as you can:

• the product, its version, and the operating system;
• what the problem is and what an attacker could do with it;
• the steps to reproduce it, or a proof of concept;
• whether you know of anyone using it already.

What happens next

• We acknowledge your report within three business days.
• We confirm the problem, tell you what we found, and keep you informed until it is fixed.
• We fix it and publish an advisory below, naming you if you wish. Buyers of the product are also told by email.
• We ask you to give us up to 90 days before you publish details, or less if the fix is out sooner. If the problem is being exploited already, we act at once.

Which versions receive security fixes

• oncut KeyLang: the latest release, on Windows and on Linux.
• oncut Prism: the latest release, and the latest release each license is entitled to run, as the End-User License Agreement (section 12) describes.
• oncut License Manager: the latest release.

No oncut product updates itself. A fix reaches you when you install the new release from this site, which is why we publish every security fix here and email buyers about it.

Advisories

No security advisories have been published.

Who we are

oncut makes these products in Athens, Greece. Address and registration numbers: legal notice. A machine-readable copy of this contact is at /.well-known/security.txt.