Acceptable Use Policy

1. Only test what you are allowed to test

• Scan, monitor or test only websites, APIs and systems you own or have the owner's explicit permission to test, and stay within the scope of that permission.
• Run load tests only on domains you have verified in the Service, only with the provided presets, and never on shared hosting or third-party services (such as payment pages or authentication providers) that you do not control.
• Use login flows and API checks only with test accounts and data you are allowed to use — never real customers' accounts.

2. Prohibited

• Using the Service to attack, overload, disrupt or gain unauthorized access to any system, or to probe internal or private networks.
• Attempting to bypass usage limits, ownership verification, rate limits or other security measures, or creating multiple accounts to obtain more free usage or trials.
• Testing websites for illegal content, or using the Service in connection with malware, phishing, spam or fraud.
• Collecting personal data from websites you do not have the right to test, or using results to harm their owners or users.
• Reverse engineering, reselling or offering the Service to others without a written agreement with us.
• Uploading content that infringes others' rights or breaks the law.

3. What happens if this policy is broken

We may stop scans or load tests immediately, disable scanning for a project, suspend or close accounts, and cooperate with affected parties and authorities. We keep records of scan authorizations for this purpose.

To report abuse of DevScan AI against your website, email [email protected] with the affected domain and the time it happened. We investigate every report.

4. Security research

If you find a vulnerability in DevScan AI itself, please report it privately to [email protected]. Do not access other users' data, degrade the Service or publicly disclose the issue before we have fixed it. We will not take legal action against good-faith research that follows these rules.