COMPANY & SECURITY
Who's behind Sculk
Security software is only as trustworthy as the people who ship it. Here's who we are, how to reach us, and how we handle the things that matter when you run our code on your server.
The business
- Trading as: Sculk AntiCheat.
- What we make: Sculk AntiCheat — a packet-level anticheat plugin for Minecraft servers (Paper, Spigot, Purpur, Folia) and a server-side anticheat resource for FiveM.
- Based in: Australia. Prices are in AUD and include GST.
Contact
- Support & billing: sculkanticheat@gmail.com — or the Minecraft and FiveM support pages, where every message gets a tracked ticket reference.
- Privacy requests: sculkanticheat@gmail.com (see the Privacy Policy).
Security & responsible disclosure
If you believe you've found a security vulnerability in the Sculk website, plugin, or FiveM resource, tell us before disclosing it publicly and we'll work with you to fix it.
- Report to: sculkanticheat@gmail.com with steps to reproduce and the affected version.
- Our commitment:we'll acknowledge your report, keep you updated on the fix, and credit you if you'd like once the issue is resolved. Please give us reasonable time to patch before going public, and don't access or modify other users' data while testing.
Software integrity
- Delivery: licence keys and downloads are issued through your account over HTTPS. Only download Sculk from this site or your account — never from third-party re-uploads.
- Checksums: each release download lists a SHA-256 checksum on its account download entry so you can verify the file you received matches what we published.
- Dependencies & updates: we track our dependencies for known vulnerabilities and ship security fixes as free updates within your tier. Breaking changes are called out in the changelog with migration notes.
- Supported versions: we support the current release and the one before it. Older versions keep working but stop receiving fixes — see the compatibility matrix on the Minecraft page.
How we work
Two principles govern everything we ship. We publish measured numbers or no numbers — benchmark claims stay blank until real data exists. And humans make the expensive calls — automation only contains what is provably impossible, while staff decide punishments and appeals are part of the system.