01
Scoping
Game or product
The title and platform.
Build
The version we test against.
Question
What you want tested.
Sequence
Engagement process
Six steps, in order, from first scope to retest. We do not start testing before authorization.
Steps
How an engagement runs
02
Authorization and rules of engagement
RequiredWork starts only after the owner authorizes it in writing.
RequiredThe rules name the build and what we will not touch.
03
Testing against the build
We test the build you give us. These topics are in the note when the rules name them.
manual mapping hypervisor-based hiding VM-based obfuscation integrity checks04
Report
findings reproduction build identity
05
Fix support
LengthSet during scoping
We answer questions while you fix. Writing the patch is your work.
06
Retest
You send the fixed build. We repeat the attacks and mark each finding closed or still open.
Same build family
Same rules
Written delta
How we publish a third-party issue is on the disclosure page.