Responsible Disclosure
Report security issues responsibly.
This page covers responsible reporting for TIRust.org public website and organization-level systems.
How to report
Email security@tirust.org with a clear description, affected URL or workflow, safe reproduction details, impact, and contact information for follow-up.
Boundaries
Do not perform disruptive testing, traffic flooding, credential attacks, social engineering, data extraction, persistence attempts, or actions that access or change information that is not yours.
Player-facing services
Security issues involving the player-facing site or game-server workflows may be routed to the TIRust.fun security process.
Good faith
Reports that are safe, limited, and privately disclosed help improve the community infrastructure and are appreciated.