CYREX
Back to Portfolio
Security Testing

SCUM

Client:Gamepires (supported by Jagex)

Cyrex partnered with Gamepires to deliver penetration testing and advanced DDoS simulations using Cyrex Swarm for SCUM, securing multiplayer systems and validating server resilience to ensure fair play and high availability.

The Challenge

Securing a Hardcore, Always-On Survival World

SCUM is built around persistent multiplayer survival. Player progression, base building, and high-stakes PvP depend entirely on stable online infrastructure and secure gameplay systems.

For Gamepires, two risks had to be eliminated before launch:

  1. Gameplay Exploits — Multiplayer systems, custom Unreal Engine implementations, and online services needed to be hardened against vulnerabilities that could enable cheating or disrupt player progression.
  2. Service Disruption — As an always-on PvP environment, server downtime or a successful DDoS attack would immediately impact the player experience.

Every inventory action, player interaction, and combat scenario relies on complex backend logic. A weakness in server validation or client trust boundaries could undermine fairness. At the same time, the infrastructure had to withstand malicious traffic designed to overwhelm services.

Gamepires required validation that SCUM could remain secure and accessible under real-world attack conditions.

The Cyrex Solution

Penetration Testing & DDoS Simulation with Cyrex Swarm

Cyrex worked directly with Gamepires and Jagex to evaluate SCUM from two angles: exploit discovery and availability resilience.

Penetration Testing

Securing Multiplayer & Client Systems

Our senior security engineers performed a deep assessment of SCUM’s online and multiplayer services, with specific attention to its Unreal Engine–based implementations.

The engagement focused on:

  • Testing gameplay services for tampering opportunities
  • Validating server-side authority and interaction handling
  • Assessing multiplayer logic for exploit vectors
  • Reviewing client-side implementations for manipulation risks

We approached the title as an attacker would — attempting to interfere with gameplay systems, inventory logic, and player interactions to uncover weaknesses before malicious actors could.

This process ensured vulnerabilities were identified and remediated ahead of launch, reinforcing fair play and protecting player progression.

DDoS Testing

Validating Availability with Cyrex Swarm

To assess resilience against service disruption, Cyrex deployed Cyrex Swarm, our proprietary load and DDoS simulation platform.

Swarm enabled us to generate high volumes of realistic traffic directed at critical infrastructure components. The objective was to test how SCUM’s existing mitigation strategies responded under pressure.

The DDoS testing engagement included:

  • Simulating various types and sizes of attack traffic
  • Stress-testing detection and mitigation layers
  • Identifying infrastructure weak points
  • Validating response effectiveness under load

Throughout the simulations, Cyrex engineers collaborated in real time with the Gamepires and Jagex teams. Issues were reported as they occurred, adjustments were implemented, and re-tests were conducted to confirm improvements.

This iterative approach ensured mitigation strategies were not only theoretically sound but validated under simulated attack conditions.

The Outcome

Reinforced Security and Validated Availability

  • Identification and remediation of multiplayer and client-side vulnerabilities
  • Improved server-side validation across core gameplay systems
  • Stress-tested and validated DDoS mitigation strategies
  • Increased confidence in platform availability under malicious traffic

Client Feedback

Gamepires

Cyrex supported us with penetration testing and DDoS testing as we prepared to launch SCUM. Their expertise was instrumental in identifying and helping us mitigate vulnerabilities, ensuring fair play and high availability for our players. The team was highly knowledgeable, responsive, and genuinely easy to work with, and we’re looking forward to collaborating again in the future.
Gamepires
CYREX VERIFIED

Don't Let Players Find the Weakness

Your launch is months away. Hackers will find exploits in hours. Let our engineers secure your game before it's too late.

Response time: <24 hours • NDA included • No commitment required