We only provide patches for version 1.9.4.5 of Magento 1. This is the latest version and any older versions won’t be supported. If you run a Magento 1 shop in an older version, but have always patched it, it is likely that our patches will work there, but we cannot guarantee this. We only test our patches for version 1.9.4.5.

We test all our patches under PHP versions 7.2, 7.3 and 7.4.

Older PHP versions like PHP 5.6 are not supported, because they are not supported by PHP itself.

Please refer to our partner program and send us an email: info@mage-one.com!

Mage One focusses on security and future server upgrades. We respect the original source code of Magento 1. In addition, we are a reliable company with exactly this purpose: providing security fixes and fixes for server upgrades. We have processes to find new security issues (security audits and public bug bounties). We start working right away when we get notice of vulnerabilities or new software versions.

Voluntary projects like OpenMage with their MageLTS might have a bigger scope (i.e. fixing usability bugs, developing new features, etc.). Their ability to fix security problems relies solely on the free private time of individuals. A patch might take only 2 hours but it could also be never fixed. With new features there is as well always the risk of new bugs and security issues.

We currently only support access to our patches but already thinking about a way to post pull requests directly to our merchants’ repositories.

We want to make sure that you can run your Magento 1 store as long as you need it without being afraid about GDPR or new PHP versions for example.

An instance is a set of up to 3+n Magento 1 installs (Live, Live Failover, Staging, Development per Developer) as long as the scope of the installation remains the same. If you are unsure about your setup, contact us and we will help you out with the definition.

Mage One will be as secure as Magento 1 (not 2). The good thing about Mage One is that the risk that we add new security flaws is almost zero. We don’t add features to the code base, therefore the codebase will be only more secure over time. In the meantime Magento 2 is subject to constant change. Features are added, code is changed and mistakes can happen.

Yes, we do! More information can be found on the bug bounty info portal.

We will immediately start to work on patches when we get notice of vulnerabilities. You’ll receive patches as soon as possible, latest within 30 days.

You have to pay in order to get access to our services.