Acceptable Use Policy

This Acceptable Use Policy ("AUP") governs your use of the ShieldView platform and services. Because ShieldView performs real offensive security testing, using it responsibly and lawfully is a condition of access. By using the platform you agree to this policy, which supplements our Terms of Service.

Authorization is mandatory

You may only run testing against assets, systems, domains and accounts that you own or are explicitly authorized to assess. You are responsible for obtaining and maintaining all necessary permissions before defining any scope. Testing systems without authorization is prohibited and may be unlawful.

Prohibited uses

You must not use ShieldView to:

• Assess or attack any system you are not authorized to test.
• Violate any applicable law, regulation, or third-party rights.
• Intentionally cause damage, sustained denial of service, data destruction or loss of availability beyond what is required to safely demonstrate a finding.
• Access, exfiltrate or retain data that is not yours beyond what is needed to prove impact.
• Circumvent the platform's safety controls, approval gates or rate limits.
• Resell, sublicense or misrepresent the service, or use it to build a competing product.
• Interfere with the integrity, security or availability of the platform itself.

Safety and governance

ShieldView provides human-in-the-loop approval gates, kill switches, sandboxing and immutable audit logging. You are expected to use these controls in good faith. Attempting to bypass them, or configuring engagements to evade governance, violates this policy.

Your responsibilities

• Keep your account credentials secure and limit access to authorized users.
• Define scope accurately and keep it within your authorization at all times.
• Coordinate with relevant stakeholders before testing production systems.
• Comply with any additional rules of engagement agreed with your organization.

Enforcement

We may investigate suspected violations and may suspend or terminate access to protect the platform, our customers, or third parties. Serious or unlawful misuse may be reported to the appropriate authorities.

Reporting abuse

If you believe someone is misusing ShieldView, or you have found a security issue, contact us at security@shieldview.com.

Changes to this policy

We may update this AUP from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, communicated to you.