Security

This page describes how NodePlay protects its infrastructure and the game servers of its customers, what we do when a server is compromised, how we use artificial intelligence tools in this work and how to report a vulnerability to us. It supplements our Terms of Service and Privacy Policy.

How We Protect Our Infrastructure

• DDoS Protection: Every server is protected against DDoS attacks at the network level.
• Isolation: Each game server runs in its own isolated environment with its own limits on processor, memory and disk, so a problem on one server does not affect the servers of other customers.
• Backups: We back up servers automatically once a day and keep the backups with cloud providers for 30 days, separately from the servers themselves.
• Website: Our website is available only over an encrypted connection (HTTPS) and is protected by a web application firewall.
• Access: Only the staff who need it for their work have access to our servers and customer data.
• Updates: We keep the software of our servers and services up to date and fix known vulnerabilities.

If Your Server Is Compromised

Signs that a server has been compromised: unknown players get operator or administrator rights, unknown files or plugins appear, the server lags or crashes for no reason, sends spam or attacks other systems, or we notify you of suspicious activity.

In that case, contact our support right away: through the online chat after logging in to the website, or at support@nodeplay.net. Tell us which server is affected, what you noticed and when, and what you have changed recently (plugins, mods, uploaded files).

What we do:

1. Contain: If the server endangers other customers or our network, we stop it or restrict its network access and tell you about it.
2. Preserve: We save copies of the logs and suspicious files to find the cause and to restore the server.
3. Investigate: We look for the way the attacker got in (a vulnerable or infected plugin or mod, a leaked password) and for everything the attacker changed.
4. Clean Up: We remove the malicious code or restore the server from a backup made before the incident, and update the vulnerable software where possible.
5. Report: We tell you what we found and what we changed, and recommend what to do next, for example which passwords to change.

Help with incidents covers servers hosted by NodePlay. We cannot guarantee that every consequence of an attack will be found or all data recovered, and we never take action against an attacker's systems. If an incident affected the personal data of your players, you as the server owner are responsible for any notifications required by law; we will give you all the information we have.

How We Use AI Tools

To investigate incidents faster and more thoroughly, our team uses AI models of the Claude family developed by Anthropic, including Claude Mythos. We use them to:

• analyze the logs, settings and files of an affected server to find malicious code, backdoors and the way the attacker got in;
• find out what suspicious plugins, mods and scripts do;
• prepare fixes: clean infected files, update vulnerable software and make the configuration more secure;
• check that the cleaned server works and that no malicious code is left on it;
• review the security of our own code and infrastructure (the website, the control panel and the servers) and fix the weaknesses we find.

The rules we follow:

• On Request Only: We analyze a customer's server only when the customer asks us for help, or when the server endangers other customers or our network.
• Only What Is Necessary: AI tools receive the files, settings and logs of the affected server. They do not receive your payment information, the password to your account or the data of other customers.
• People Decide: AI tools assist our staff. Every change to your server is approved by our team, and AI tools never make decisions about you or your account.
• Defense Only: We use AI tools only to protect and restore the systems we are responsible for. We never use them to attack, scan or access systems we have no permission to work with, including an attacker's systems.
• Data Protection: Anthropic processes the data on our behalf under a data processing agreement and does not use it to train its models. Anthropic may keep the data for a limited time to detect misuse of its services. Details are in our Privacy Policy.
• Your Choice: If you do not want AI tools to be used for your request, tell us when you contact support. We will handle it without them, which may take longer.

Reporting a Vulnerability

If you have found a vulnerability in our website, control panel, billing or infrastructure, write to support@nodeplay.net with "Security" in the subject line. Describe the vulnerability and how to reproduce it.

When looking for vulnerabilities, please follow these rules:

• do not access, change or delete data that does not belong to you, and stop as soon as you reach such data;
• do not disrupt our services: no DDoS attacks or load testing, no spam and no attempts to deceive our staff or customers (social engineering);
• give us reasonable time to fix the vulnerability before you tell anyone else about it.

We will confirm that we have received your report and keep you informed about the fix. We will not take legal action against research carried out in good faith in line with these rules.

Games, mods and plugins are developed by third parties: please report vulnerabilities in them to their developers.