This Acceptable Use Policy (the "Policy") sets the boundaries for using the Verdiq platform (the "Service"). It forms part of the Terms of Service and applies to every user in your organization.
1. Authorized security testing only
The Service can simulate attacks, scan for vulnerabilities, and run other security testing. This is the most sensitive thing the Service does, so it carries the strictest rule: you may direct testing only against systems and assets you own or are explicitly authorized in writing to test. You are responsible for securing that authorization, for staying within the scope, schedule, and rate limits you configure, and for using the kill-switch when needed. Directing testing at third-party systems without authorization is prohibited and may be unlawful.
2. Prohibited uses
- Breaking the law, infringing intellectual-property or privacy rights, or helping others do so.
- Uploading malware, or using the Service to develop or deliver malicious code beyond its consented testing scope.
- Attempting to breach, probe, or circumvent the Service's own security, isolation between organizations, or access controls.
- Accessing data or organizations that are not yours, or sharing credentials with unauthorized people.
- Overloading or interfering with the Service, or evading usage limits and metering.
- Reselling, sublicensing, or providing the Service to third parties except as your agreement allows.
- Using the Service's outputs to harm others or to misrepresent a compliance or security posture.
3. Your responsibilities
Keep credentials secure, enable available account-security controls, manage your users' access, and ensure your use complies with the laws and regulatory obligations that apply to your organization.
4. Enforcement
We may investigate suspected violations and may suspend or limit access to protect the Service, our other customers, or third parties, with notice where practicable and immediately where there is a serious or ongoing risk. Serious or repeated violations may lead to termination under the Terms of Service.
5. Reporting and contact
Report misuse or security concerns to security@valotech.org. General questions: legal@valotech.org.