Rockstar non-game security vulnerabilities
Rockstar describes its public HackerOne program as intended for potential non-game-related security vulnerabilities, subject to the live program scope.
Review Rockstar’s HackerOne programResponsible reporting · Minimize harm
Found something important? Don’t spread it.
Game Defense accepts concise public-source tips. We do not accept leaked files and do not replace a publisher, platform, security team, or law-enforcement agency.
Do not collect more evidence
Stop before access becomes amplification.
Do not enter a private system, bypass access controls, obtain credentials, download files, or preserve unauthorized material for Game Defense. Do not repost leaked footage to prove that it exists.
- Leaked game builds or unauthorized source code
- Passwords, access tokens, cookies, or stolen credentials
- Private database exports or internal documents
- Doxxed or otherwise private personal information
- Malware, exploit code, or executable files
- Copies of leaked images, audio, or video
- Links whose purpose is piracy or stolen-file distribution
A useful message
Describe. Link. Explain.
A concise report usually contains only what is needed to understand a public claim.
What you observed
Give a short description and distinguish direct observation from inference.
Where it is documented
Link to an already-public, reputable source when one exists. Do not attach the underlying material.
Why it may matter
Include an approximate date and a calm explanation of the possible significance.
Official channels
Choose the channel that owns the issue.
Game Defense is independent and is not authorized to receive reports on behalf of these organizations. Review live scope and rules before submitting or testing anything.
Rockstar bugs, glitches, and exploits
Rockstar says game bugs, glitches, and exploits are outside the public HackerOne program and should go through Support.
Submit to Rockstar SupportGTA Online cheating or abusive behavior
Use Rockstar’s reporting tools. Rockstar says the in-game route is most effective for cheating reports because it can collect more context.
Read Rockstar’s How to Report guideOther Take-Two labels
Do not assume Rockstar’s HackerOne program covers every Take-Two label or product. Select the company and service that owns the issue.
Choose a label through Take-Two SupportDiscord content or behavior
Report the specific message or content through Discord’s in-app tools. Do not organize mass reports, duplicates, or false claims.
Read Discord’s reporting guidanceXbox content or behavior
Report the specific player or item through Xbox’s complaint process using the category that matches what you observed.
Read Xbox complaint instructionsCopyright notices are different
Do not impersonate a rights holder.
Formal copyright notices generally require the copyright owner or an authorized representative to make statements about ownership, authority, and good faith. Game Defense and ordinary visitors should not submit notices on Rockstar’s, Take-Two’s, or another owner’s behalf.