Security at HeppaSoft
Found a vulnerability? Tell us privately first — we fix fast and credit fairly.
How to report
Email destek@heppasoft.net with a description, steps to reproduce, and the impact. Expect a first reply within 72 hours. Please do not open public issues for vulnerabilities.
Scope
In scope: this website, the game servers in our network, the web stores, and HeppaSoft bots and plugins. Out of scope: Discord, Mojang, Microsoft and payment providers themselves — please report those to the vendor.
Ground rules
Do not destroy data, degrade the game for others, or access accounts that are not yours. Stop at proof of impact and include it in your report.
What happens next
We confirm the report, fix the issue, and disclose it responsibly. With your permission you get a public thank-you in our changelog. We do not run a paid bug bounty.
Last updated: October 2026