LEGAL
Acceptable Use Policy
What must not be done with VENRAC.
Unauthorized scanning
Do not scan domains you neither own nor have permission to assess.
Abuse and load
Do not generate excessive automated load, bypass rate limits or attempt to exhaust quotas belonging to others.
Credentials
Do not supply credentials you are not authorized to use, and do not attempt to extract another tenant's secrets.
Impersonation
Do not claim a business, domain or identity that is not yours.
Malware and exploitation
Do not use VENRAC to distribute malware or to exploit third-party systems.
Prohibited scraping
Do not use the scanner to collect personal data at scale or in violation of a site's terms.
Third-party actions
Do not execute write actions against systems you are not authorized to change.
Security controls
Do not attempt to defeat authorization, policy evaluation, approval requirements or audit logging.
Enforcement
Violations can lead to suspension. Security reports are handled through the vulnerability disclosure page.