Usage Policy

• Investigate only systems you own or are explicitly authorised to test.
• Follow the terms of service and rate limits of every system and provider you use, including any rules on evaluations and benchmarking.
• Do not use the service to get around access controls, safety measures or usage limits of another system.

• Developing or deploying content or tools meant to harm people, including weapons, malware, harassment or fraud.
• Extracting personal data, training data or confidential information from a system without permission.
• Testing on real people's personal data without a lawful basis and their consent where required.
• Publishing results in a way that misrepresents them, for example by hiding failed checks or presenting simulated runs as real.
• Anything that breaks the law where you or the tested system operate.

If an investigation reveals a security or safety problem in someone else's system, report it to that system's owner through their disclosure channel before publishing, and give them reasonable time to respond.

To report misuse of the service or a problem with it, write to [to be completed]. Include what happened and, if you can, a link to the investigation.