We're in closed beta. Sign up for early access — founding pricing locks in at signup, for as long as your subscription stays active.
Machine-readable contact details: security.txt
Email [email protected] with the details below. Please report privately rather than opening a public issue.
This policy covers the UnityFreak platform: the API, the web application, the git/VCS hosting service, and the shared packages they are built from.
Vulnerabilities in third-party dependencies should generally be reported to their own maintainers, though we would still like to know if UnityFreak is affected.
Reports are read and triaged by the people who operate the platform; there is no separate on-call security team.
We take every report seriously and will acknowledge it, but as a small, pre-launch team we do not yet have a formal response-time SLA to publish.
Once a fix is available, we will coordinate on disclosure timing with the reporter.
UnityFreak is deployed continuously from its main branch; there are no maintained older versions. Fixes land on main and are deployed as part of the normal release process.
Back to the Security & Trust Center or the public status page.