1. Authorized Use Only

SecurePentest must only be used for legitimate security testing purposes. You must have explicit written authorization before conducting any security assessments on systems, networks, or applications.

2. Acceptable Uses

The following uses are permitted:

• Security testing of systems you own
• Authorized penetration testing with written permission
• Vulnerability assessments within scope agreements
• Bug bounty programs with explicit rules
• Educational and training purposes on authorized systems
• Compliance assessments and audits
• Red team exercises with proper authorization

3. Prohibited Uses

The following uses are strictly prohibited:

• Testing systems without proper authorization
• Launching denial-of-service (DoS/DDoS) attacks
• Distributing malware, ransomware, or destructive code
• Stealing, modifying, or destroying data
• Accessing private data beyond scope
• Social engineering without explicit permission
• Testing critical infrastructure without authorization
• Sharing access credentials with unauthorized parties

4. Resource Usage

To ensure fair usage for all users:

• Do not exceed reasonable rate limits for API calls and scans
• Avoid running resource-intensive scans during peak hours
• Clean up old projects and scan data periodically
• Report any performance issues or bugs
• Do not attempt to bypass usage quotas or restrictions

5. Reporting Requirements

Users are required to:

• Report any suspected misuse of the platform immediately
• Disclose vulnerabilities found in SecurePentest responsibly
• Maintain accurate records of authorization for all testing activities
• Cooperate with investigations related to policy violations