We welcome responsible reporting of security issues affecting ToneCustoms repositories or resources.

Do not post security vulnerabilities, credentials, tokens, private customer information, license keys, or protected source files in public GitHub issues or Discord channels.

If the repository offers GitHub private vulnerability reporting, use Security → Report a vulnerability. Otherwise, join the ToneCustoms Discord and request a confidential contact channel without publishing the sensitive details.

Provide the affected project, potential impact, safe reproduction steps, and redacted evidence. Reports are reviewed as received; no fixed response or remediation deadline is promised.

For normal gameplay and installation support, use ToneCustoms documentation.