FAQ

In our FAQ you will find answers to questions that come up again and again. If you have a question that you can’t find the answer to here, you are always welcome to contact our support. At the bottom right you will find our “Contact” button.

Our FAQ is constantly being expanded!

What happens after 2024 with Shopware 5?

As of August 2024, Shopware 5 support will start through safefive. After the end-of-life of Shopware 5, we offer security updates and compatibility patches as an official Shopware partner to provide all store owners with an ideal migration phase

What is part of safefive’s offering?

We offer a wide range of services to make running your online store safer for you – and shopping safer for your customers. Our main focus is on security and compatibility patches. In this way, we ensure that your Shopware 5 will continue to run securely and be technologically up-to-date in the future. In addition, we inform you about current developments around the topic of “security in the eCommerce sector”, such as changes to data protection laws or processes and expectations of payment and credit card service providers.

How often will there be security updates?

From our experience with Magento 1, we can report that there will be security patches about 4-6 times per year. The rarer the better. Because this means: we have neither discovered security vulnerabilities in our simulated attacks, nor have we been notified of any anomalies by our partners. Experience shows that more gaps are found in the beginning. The frequency of patches decreases over time, as the code is no longer changed. You are welcome to think of us as a kind of good insurance. If you need us, we are there for you!

What is the difference between security and compatibility updates?

The difference is quickly explained. When we patch a security vulnerability, the stored customer data was not sufficiently protected before. Compatibility patches are there to make Shopware 5 run on newer technologies, such as MySQL 8 or PHP 8. This is important because MySQL, PHP and Apache only provide security updates for current versions in the medium term – and security is only guaranteed if both the application and the underlying software such as MySQL and Apache are secure.

When will the safefive service start?

We will start in two phases. To ensure an uninterrupted transition, the first phase starts before the end-of-life date. We are already setting up our system and looking forward to welcoming you as a customer. On 7/31/2024 the official support for Shopware 5 by Shopware AG will end. From this date, we will take over and deliver security and compatibility patches – read more under“What is part of safefive’s offer”

What do I have to pay for the security updates?

We have given a lot of thought to what a fair pricing model might look like. Our decision for revenue-based pricing is due in particular to the fact that we come from the community and would like to give something back. We know about the challenges of the different store operators and would like to offer our service equally to small, medium and large companies at feasible conditions. You can find our detailed price list at: safefive – Prices

What counts as turnover?

Good question! What is processed in Shopware counts as turnover. In simple terms – if the recipient is created in Shopware, the generated revenue is counted towards sales. If you have ebay and/or Amazon connected and processing orders through Shopware, that revenue is included. The same applies if you run a B2B store and only send offers while the contract acceptance is then handled by your sales or ERP system. These revenues also count as sales. Exceptions are e.g. credit notes and cancellations, since these are not booked as revenue by you.

Do you offer bug fixes?

We do not offer our own bug fixes. For small or larger problems as well as system adjustments of any kind, we can recommend specialists from our large partner network

Do you also support the Professional and/or Enterprise Edition?

Yes! In consultation and with the support of Shopware we can offer our Long-Term-Support for all editions of Shopware 5.

Are there any system requirements?

The system requirements are identical to those of your current Shopware version. However, please note that MySQL, PHP and Elasticsearch etc. are also subject to a release cycle and can thus also be end-of-life. Therefore, it is always recommended to use an up-to-date stack of software components.

What is a bug bounty program?

Bug bounty is English and means bounty. We pay a bounty for each vulnerability found in Shopware 5. The more critical the vulnerability, the higher the bounty. Security holes are traded on the black market. Even though we may not be able to prevent information about possible vulnerabilities from ending up there, we can ensure that your system is protected from possible attacks with the help of a patch. Even if a bot is built tomorrow that automatically attacks all systems, you will be “safe”.

How are security updates installed in my store?

safefive offers a Shopware 5 plugin for download. You will receive this plugin after concluding your contract in your customer portal. Afterwards, please install this plugin in your Shopware 5 store via the plugin manager. The plugin manager is located in the settings menu. Via the button “+ Upload Plugin” the plugin file can be uploaded. New versions of this plugin must also be installed there regularly in the same way.

Why do I have to pay for safefive?

safefive maintains a BugBounty program. This way we offer programmers a financial incentive to report security vulnerabilities instead of selling them on the black market. In addition, the operation of the platform and the development of patches must also be financially secured.

How long will safefive offer this service?

You can count on our service for 5 years starting August 2024. We will regularly inform you about planned extensions of our offer.

Do I also have to pay for my test environment (staging)?

The cost of safefive is calculated per production deployed instance. Local development systems and test systems are excluded from this count and can be operated free of charge at any time.

What if my revenue changes?

If your turnover changes, you can easily enter this yourself in your customer portal. To do this, select the active contract for which you want to adjust the turnover. Then enter the new turnover and press save. Our system will then guide you step by step through the necessary adjustments.

What is PCI/DSS?

PCI-DSS, the Payment Card Industry Security Standard regulates the requirements under which credit card payments may be offered. An important core of this is the regular updating of the store software. With safefive, an effective component of the PCI-DSS criteria can be achieved here.

Ab August 2024 startet safefive mit dem Long Term Support (LTS) für Shopware 5
Learn more and stay up to date? Subscribe to our newsletter!

We collect your email address to send you emails about services from time to time.
By providing your email address, you agree to our Privacy Policy.

Scroll to Top