Skip to content

Security: Alt-Org/Altzone-WebPages

Security

SECURITY.md

Security Policy for Psyche’s Royale Gaming ry

Purpose

At Psyche’s Royale Gaming ry, we prioritize the security of our applications, including the mobile game ALT Zone 1.0. This policy outlines how we manage, report, and respond to potential security vulnerabilities to maintain a safe environment for our users.


Reporting Security Issues

If you identify a security vulnerability in ALT Zone Game or any other product managed by Psyche’s Royale Gaming ry, we encourage responsible disclosure to ensure swift resolution.

Contact Method

To report a security issue, please send an email to proyaleg@gmail.com.

Guidelines for Reporting

To help us investigate and resolve the issue efficiently, please include as much of the following information as possible:

  • Issue Type: Clearly state the type of vulnerability (e.g., buffer overflow, SQL injection, cross-site scripting).
  • Affected Components: Provide details about the affected parts of the application (e.g., module, API endpoint, or feature).
  • Location of the Vulnerable Code: Specify the version (tag/branch/commit) or URL of the relevant code if applicable.
  • Reproduction Steps: Provide clear, step-by-step instructions to reproduce the issue.
  • Proof-of-Concept (PoC): Share any exploit code or screenshots to illustrate the vulnerability.
  • Impact Assessment: Explain the potential consequences of the vulnerability (e.g., data breach, privilege escalation).
  • Configuration Details: Mention any specific settings required to reproduce the issue.

Handling Reports

Upon receiving a vulnerability report:

  1. Acknowledgment: We will acknowledge receipt of your report within 3 business days.
  2. Triage: Our security team will assess the report to determine validity and severity.
  3. Remediation: If the issue is confirmed, we will prioritize its resolution based on its criticality.
  4. Notification: We may communicate with the reporter during the remediation process for additional information.
  5. Disclosure: Once resolved, we may publish a security advisory detailing the issue and fix.

Safe Harbor Policy

We encourage ethical reporting and will not take legal action against individuals who:

  • Report security issues in good faith and comply with this policy.
  • Avoid compromising user data, disrupting services, or exploiting vulnerabilities.
  • Refrain from publicly disclosing the issue before it is resolved.

Policy Updates

This Security Policy may be updated to reflect changes in our approach or applicable regulations. We recommend reviewing the policy periodically.

For any questions or clarifications, contact us at proyaleg@gmail.com.

There aren’t any published security advisories