Trust & Safety

We explain what protects the website today, and what we must finish before any mod files become available.

Protections already in place

The public website uses HTTPS through Cloudflare Pages. The site owner has enabled Cloudflare managed security rules, HTTP DDoS protections, browser integrity checks, and bot protection. The domain registrar and Cloudflare accounts use two-factor authentication. Those measures help reduce risks, but cannot prevent every attack.

Checks required before public uploads open

• Verify creator accounts and restrict access to each creator's own listings.
• Allow outer files with the .scs extension only for ATS/ETS2; inspect actual archive structure and contents, not just the filename.
• Keep every new or updated file in private quarantine pending isolated validation, malware inspection, and administrator approval.
• Validate 640 × 360 thumbnails, external links and listing text.
• Make reporting, removal, appeal, and audit procedures operational.
• Test backup recovery, account protection, and download access before inviting creators.

Meaning of future review labels

“Security Reviewed” will mean a specified version went through our documented inspection and approval process. It will never be a guarantee that a mod is malware-free, compatible with every game installation, or endorsed by a game publisher.

Responsible security reporting

Found a vulnerability or suspicious behavior? Email support@creatorsmoddepot.com with “Security report” in the subject. Please do not send passwords, exploit payloads, malware samples, or other people's private data by ordinary email. We will provide a safer submission route if evidence is necessary.