Security status
Where Cyclop OS security stands
How often we patch, the latest patches, how to report a flaw to us, and the key that signs every package. We claim no external audit: none has been done yet.
Supported until April 2029
Patch cadence
- Ubuntu fixes
- Taken from Ubuntu noble-security through a university mirror, installed automatically
- Cyclop packages
- A patch every week, two weeks at most
- Packages we modify
- Target: a rebuilt package within 7 days of an Ubuntu security fix
- End of support
- April 2029, with the end of Ubuntu 24.04 standard support
Latest patches
Read from the patch notes, at most once a minute.
Report a flaw
Privately, never on the forum.
- Address
- support@cyclop-tech.com, subject "[security]"
- Acknowledgement
- Within two working days
- Disclosure
- 90 days by default before you publish, adjusted together
- security.txt
- cyclop-tech.com/.well-known/security.txt
Repository signature
Every package in our repository is signed with this key. Apt refuses a package it did not sign.
- Fingerprint
- 1721 69A9 2BB4 6E2E 0970 C29A CA7F F388 5ECB 073B
- Type
- RSA 4096
- Expires
- 21 September 2027
- Public key
- packages.cyclop-tech.com/cyclop-archive-key.gpg
Compare with the key installed on your machine
gpg --show-keys --with-fingerprint /usr/share/keyrings/cyclop-os-keyring.gpgAudits
No external audit yet
No external security audit of Cyclop OS has been carried out so far, and we claim no certification. The day one takes place, its report will be published here.
Everything you can check
Where the software comes from, what the machine sends, and how to verify it.