How to report
Send a description of the issue, the product or SKU, and a version or digest if you have one. Do not send exploit code, credentials, or customer data.
Contact
Use support@ng-key.com. This mailbox is the public product-security contact.
Scope
This page covers NG-Key, NG-Key-Reseller, NG-Production, and first-party devices operated by Next Generation Access SL. Reports about third-party products belong with those vendors.
What happens next
We acknowledge reports within two business days and coordinate a fix with the reporter. This page is a disclosure policy, not a certificate or compliance claim.