Security
Report a vulnerability
Found a security issue in a Balane app or on one of our websites? Email support@balane.tech with the subject "Security". Please do not use the public bug tracker, so the issue does not become public before it is fixed.
What helps
- Which app, which version, which operating system
- What you did and what happened, step by step
- What an attacker could achieve with it
- Whether and how we may credit you when the fix ships
What happens next
- We confirm receipt, usually within three working days.
- We assess the report and tell you whether and how severely we rate it.
- We fix it in a new version and ship it through the relevant store or the built-in updater.
- With the fix we publish a note in the release notes: what was affected, which version fixes it, and your name if you want.
- If a vulnerability is being actively exploited, we also report it to the competent authorities, as the Cyber Resilience Act (EU 2024/2847) requires.
Please publish details only once the fix is available, and no later than 90 days after your report. If you research in good faith, do not access or change other people's data and do not disrupt any service, we will not take legal action against you.
How long security updates are provided
Every app receives security updates for 5 years from the release of its current version. Fixes ship as a new version of the app, and updating is free. Older versions do not receive separate fixes: to stay secure, install the latest version. Each new version moves the end date further out.
| App | Security updates until at least |
|---|---|
| BalaneDisk | October 2031 |
| Balane Mind | 5 years from the release of the current version |
| Balane Desk | 5 years from the release of the current version |
| Balane Plan | 5 years from the release of the current version |
| The Second Look | 5 years from the release of the current version |
| CellAlert | 5 years from the release of the current version |
| WindowNote | September 2031 |
| usable.software | 5 years from the release of the current version |
| Chessplosion | October 2031 |
| Bappy Flirds | 5 years from the release of the current version |
| shipglobal | 5 years from the release of the current version |
| Balane Docs | 5 years from the release of the current version |
| Balane Sheets | 5 years from the release of the current version |
| Balane Slides | 5 years from the release of the current version |
| Balane Forms | 5 years from the release of the current version |
| Balane Reports | 5 years from the release of the current version |
| Balane Mail | 5 years from the release of the current version |
| Balane Content Planner | 5 years from the release of the current version |
| Balane Paperwork | 5 years from the release of the current version |
| Balane Dialog | 5 years from the release of the current version |
| Huddle | 5 years from the release of the current version |
| GridBar | 5 years from the release of the current version |
| NetMute | 5 years from the release of the current version |
| CamAware | 5 years from the release of the current version |
| FlowVisual | September 2031 |
| Screenrig | 5 years from the release of the current version |
| TextDeck | 5 years from the release of the current version |
| OtterSlide | 5 years from the release of the current version |
| oof. | 5 years from the release of the current version |
| Ausklang | 5 years from the release of the current version |
| Automation Showroom | 5 years from the release of the current version |
| Hokd | 5 years from the release of the current version |
| SynapseGym | 5 years from the release of the current version |
| SignaScan | 5 years from the release of the current version |
| ProofShot | 5 years from the release of the current version |
| Off My Mind | 5 years from the release of the current version |
| SendGuard | 5 years from the release of the current version |
| CRM Direct Email | 5 years from the release of the current version |
| Cold Email & Follow-up Automation | 5 years from the release of the current version |
| Apollo Connector | 5 years from the release of the current version |
Web-only services are not listed. They run on our servers and are updated there continuously.
Manufacturer
Balane GmbH, Balanstraße 84, 81541 Munich, Germany. Imprint. The contact is also machine-readable at /.well-known/security.txt.