Security

Scope

• uliseslicenses.xyz (web platform and public API).
• UlisesLib (license verification library).

Rules

• Test only against accounts and licenses you own.
• No denial of service, spam, or automated scraping.
• No accessing other users' data. Stop and report if you can.
• Give us reasonable time to fix before any disclosure.

How to report

Email hello@uliseslicenses.xyz with steps to reproduce, impact, and your contact. We acknowledge within 3 business days and keep you updated until resolution. Good-faith research following these rules will not face legal action from us.

For administrators

Platform admins sign in with Discord OAuth. Admin accounts must have two-factor authentication enabled on Discord. Admin actions are logged.