How WARPANEL keeps your server safe
Running a server means trusting tools with it. Here is exactly what WARPANEL stores, what it can do, and how to switch it off.
Your RCON password
- Stored encrypted (AES-256-GCM) with a key that lives only in our server environment — never in the database next to it.
- Never shown again after you save it, not even to you, and never sent to anyone's browser — including your team's.
- Used only to read your server's status and player list (every few minutes, and every 10 seconds while someone has the Live view open) and for the actions your team presses.
- WARPANEL tests the connection before saving, and deletes the password the moment you press Disconnect.
What we can reach
- Only the address you entered, and only if it's a public internet address. WARPANEL refuses local networks, private ranges and cloud-internal addresses, and checks again before every call.
- We never follow redirects from your server and cap every reply, so a misconfigured server can't make WARPANEL fetch anything else.
- The game's RCON speaks plain HTTP (the official console does too). Use a password you don't use anywhere else.
Who can do what
- Owner — everything: RCON details, kill feed, team, server profile.
- Admin — bans and unbans, map and match control, schedules, rules and alerts.
- Moderator — message, warn and kick players, broadcast, notes and tags.
- Viewer — sees everything, changes nothing.
- Every action is logged with who did it and when, and the log is visible to your whole team.
- WARDOGS Tracker admins can look (to help you) and disconnect, but can't kick, ban or change anything on your server.
Your players
- WARPANEL sees what the game shares: Steam names and IDs, kills, deaths, ping and time on the server. No IP addresses, no chat.
- Players who hide themselves from WARDOGS Tracker's leaderboards stay anonymous in your dashboard.
- Notes, tags and warnings your team writes are only visible to your team.
Cutting access
- Disconnect RCON or the kill feed in Settings any time — new data stops immediately.
- Remove a team member and their access ends on their next click.
- Change your RCON password in your server's ini and WARPANEL can no longer connect until you enter the new one.
Questions or found a problem? Contact us — security reports get answered first.