Security at G²CPU

Found something that affects the security of a G²CPU product? Tell us.

security@g2cpu.com

No account or prior permission needed. Tell us the product and version, what you did and what happened. An incomplete report is still worth sending.

Being exploited right now? Put "ACTIVELY EXPLOITED" in the subject line — that is routed separately and picked up fastest.

What we commit to

5 working days

We acknowledge your report

15 working days

We tell you whether we can reproduce it, whether we consider it a vulnerability, and what we intend to do

Every 30 days

We update you while the issue is open

We will not go quiet on you. If a report goes 30 days without an update from us, chase it

— something has gone wrong at our end.

Disclaimer

We only warrant the packages we provide when they are used under the direction of the EULA.

We do not warrant the security of software not managed by us.

This includes but is not limited to: LabVIEW, Arrayfire, CUDA, OpenCL Intel OneAPI, GPU drivers, Operating systems, your network and your application code.

After a fix

We ship a hotfix on g2cpu.com first, then a package release through the NI LabVIEW Tools Network, and publish an advisory alongside it. Advisories cover patched issues only— publishing an unpatched one tells attackers where to look and gives customers nothing to act on.

Security updates are free and, where feasible, separate from functionality updates. Every release is supported for five years. We credit you by whatever name you choose, or not at all if you prefer. There is no bug bounty.

Security updates

Every vulnerability we have fixed, with the versions affected and what to do. We publish an advisory only once a fix or mitigation is available — publishing an unpatched issue tells attackers where to look and gives you nothing to act on

No advisories published to date. Last reviewed 23 August 2026.

G²CPU is a manufacturer under Regulation (EU) 2024/2847 (Cyber Resilience Act). Where a vulnerability in our product is being actively exploited we notify the relevant EU authorities. You may also report to your national CSIRT.

Natan Biesmans · Kaulillerweg 185, 3950 Bocholt, Belgium · security@g2cpu.com · Policy v1.0, 23 August 2026