Acceptable use policy

Effective

This policy applies to everyone using . Breaking it may lead to suspension or closure of your account.

You must

• only analyse configurations you own, or are authorised by the owner to handle;
• keep each login to one named person;
• follow your organisation's and your clients' security and change-control rules when acting on findings or scripts.

You must not

• use the Service or Output to plan or carry out unauthorised access to any network or system;
• try to break, probe or overload the Service, or get around plan, seat or security limits;
• scrape, copy or extract the Service's checks, mappings or code, or use them to build a competing product;
• resell or provide access to the Service as your own service (sharing Output with clients is fine);
• upload malicious code, or use the Service for anything unlawful.

Reporting

Report misuse or security issues using the report form or to . We welcome responsible disclosure of vulnerabilities: see our vulnerability disclosure policy.