Undertale Wiki:Security policy

This page details Undertale/Deltarune Wiki's security policy. If you find a security vulnerability in any of our websites, this policy explains how the reporting procedure works. We take the security of our websites seriously, and will look into taking appropriate action as soon as possible.

Reporting

Send an email to [email protected] (preferably in English) with the details of the vulnerability, including the page you found it on, the circumstances under which it is triggered, and a proof of concept if available. You do not need to encrypt your email. Websites in the scope of this policy are undertale.wiki, deltarune.wiki, and related subdomains. When performing security tests, please try to minimize any disruption to our websites.

You might receive an automated response pointing you to this policy. If you included the specific details of the vulnerability, wait for a human to respond instead, and we will aim to respond within 24 hours. You can assume the contact information and procedure on this page, as well as in our security.txt, is up to date.

Awards

We do not offer monetary rewards for disclosing security vulnerabilities. We are a volunteer-run website that does not make any earnings, and therefore do not have the money to offer reasonable bug bounties. However, we can offer acknowledgement in the list below and a Discussions badge on your wiki profile, if you have one.

Acknowledgements

This is a list of all users who responsibly disclosed security vulnerabilities to us. It is empty, for now!