Acceptable Use Policy

1. Purpose

Web Compliance Suite makes requests to websites on your behalf. This policy keeps that safe for you, for the sites we visit and for other customers. It forms part of the Terms of Service.

2. Only scan what you are allowed to

• Scan only websites you own, operate, or have written permission to test.
• Do not use signed-in scanning with an account you are not entitled to use. Use a dedicated, least-privilege test account.
• Deployment scans and client portals must be set up only for domains you have verified.
• If a site owner or hosting provider asks us to stop scanning their site, we may do so and you must not work around it.

3. Do not

• Use the Service to attack, overload, exploit or gain unauthorised access to any system, or to test denial-of-service resilience.
• Aim the crawler at internal or private networks, or try to bypass our network protections.
• Evade or share around rate limits, plan limits, quotas or access controls, or resell the Service without our written agreement.
• Probe, scrape or load-test the Service itself without permission (see our security reporting rules in the Security page for responsible research).
• Upload malware, unlawful content, or content that infringes others' rights, or use the Service to harass anyone.
• Impersonate another person or organization, or misrepresent scan results as an official certification.

4. What we may do

To protect the Service we may rate-limit, pause scans, remove content, or suspend an account. We will normally tell you why and give you a chance to put things right, except where the harm is urgent or the law prevents it. We may report unlawful activity to authorities.

5. Report abuse

If you think the Service is being used against your site, write to security@webcompsuite.com with the site address and times. For vulnerabilities in our own systems see responsible disclosure.