Rebels of Gaming is a gaming clan that runs its own platform. If you have found a security vulnerability, we are glad to hear about it and will take care of it quickly.
How to report
Please email us at info@rebelsofgaming.com – not through public channels such as the forum, Discord or GitHub issues. Helpful details:
- the affected address, feature or app version
- a short description and the steps to reproduce the issue
- the possible impact as you see it
- how we can reach you for questions (and whether you would like to be credited)
You can write in German, English or French.
Scope
These addresses are in scope:
rebelsofgaming.comadmin.rebelsofgaming.comapi.rebelsofgaming.comwiki.rebelsofgaming.comrogclan.dei.rogclan.destatus.rogclan.de- the official Rebels of Gaming apps (iOS, Android, Windows, Linux) and the Discord bot
Out of scope:
- third-party services we only use (e.g. Discord, Steam, hosting providers) – please report to them directly
- the games on our game servers themselves (cheats, game bugs)
- social engineering, phishing and physical attacks
- denial of service, load and spam tests
- raw findings from automated scanners without a demonstrable impact (e.g. missing headers without an attack path)
Testing rules
- Only use your own or test accounts and never access other people’s data. If you do come across someone else’s data, stop, keep nothing and let us know.
- No attacks that disrupt the service or change or delete data.
- No high-volume automated scanning – our rate limits are not a bug.
- Give us time to fix the issue before you publish it (usually 90 days).
Good-faith research
If you follow these rules and act in good faith, you do not need to fear legal action from us. We see such testing as help, not as an attack, and will work with you to understand and fix the issue.
What you can expect from us
- an acknowledgement within 3 days
- an initial assessment within 14 days
- an update once the issue is fixed and, if you like, credit as the finder
We are a privately run clan and cannot pay rewards (bug bounty) – but we really appreciate every report.
Machine-readable
Our contact and this page are also listed in our security.txt according to RFC 9116: https://rebelsofgaming.com/.well-known/security.txt
Last updated: November 2, 2026
