Skip to content

Security: Arctisoft-Studio/Notalis-Advanced-Tag-Editor

Security

SECURITY.md

Security Policy

Arctisoft Studio takes the security of its software and account services seriously. This policy applies to every Arctisoft Studio application, to Studio Hub, to arctisoft-studio.com and to the account services behind them.

Reporting a vulnerability

Send your report to support@arctisoft-studio.com with the subject line Security report.

Please do not open a public issue, discussion or pull request for a suspected vulnerability, and do not disclose it publicly before we have had the opportunity to address it.

Include, as far as you can:

  • the application or service affected and its version;
  • a description of the issue and its potential impact;
  • the steps required to reproduce it;
  • any proof-of-concept material, kept to the minimum that demonstrates the issue.

Never include passwords, sign-in codes, license keys or the personal data of other people.

What to expect

  • We acknowledge a report within five business days.
  • We investigate, keep you informed of our assessment and tell you when a fix is released.
  • We are glad to credit you once the issue is resolved, if you wish.

Scope and conduct

Research in good faith is welcome. Please:

  • use only accounts and licenses that you own;
  • do not access, change or delete data that is not yours;
  • do not degrade the service for others, including by automated scanning at volume;
  • do not attempt social engineering or physical attacks.

Supported versions

Security fixes are provided for the current release of each application. Studio Hub installs the current release and keeps it up to date.

There aren't any published security advisories