Legal
Acceptable Use Policy
Effective Date: October 29, 2026 (Version 2026.2)
1. Purpose & Scope
This policy sets out what you may and may not do with DVSentry: its scanners, web, network and AI tests, cloud and cluster readers, agents, resilience tests, Secure Share and the free public scan. It forms part of the Terms of Service.
2. Explicit Authorization Requirement
You may ONLY run security assessments, scans, AI tests, resilience tests or monitoring against repositories, systems, domains, IP addresses, cloud accounts, clusters and AI services that:
- You own directly, OR
- You possess explicit, documented, written authorization from the legitimate owner to assess.
For a cloud-hosted AI service, "owner" includes the provider whose terms govern it: test it only as those terms allow. The free public scan may be used only on public repositories you own or are allowed to test.
3. Prohibited Conduct
You must NOT:
- Launch denial-of-service attacks or deliberately exhaust a target's resources, or use DVSentry's load or resilience features beyond the targets and limits you were granted.
- Attempt exploitation, data exfiltration or lateral movement beyond what a DVSentry check does on an authorized target.
- Scan critical infrastructure, healthcare systems or government networks without the specific legal authorization those systems require.
- Interfere with DVSentry's tenant isolation, rate limits, ownership proofs or other safeguards, or test DVSentry itself except under the Vulnerability Disclosure Policy.
- Share credentials, resell access, or run DVSentry for third parties without our written agreement.
- Use Secure Share or any other feature to send malware, phishing, unlawful content, or personal data you are not allowed to transfer.
- Use DVSentry to break any law, including the Information Technology Act, 2000 and computer misuse laws where your targets are.
4. Safe Harbor Protection
DVSentry cannot authorize anyone to test a system DVSentry does not own, and nothing in this policy does so. Authorization to test your targets comes only from their owners. Good-faith research on DVSentry's own service is covered by the safe harbour in our Vulnerability Disclosure Policy.
5. What we do about misuse
We may refuse, stop or rate-limit a scan, disable a Secure Share link, revoke a token, or suspend an organization that breaks this policy, and we may cooperate with the owner of an affected system and with authorities as the law requires. Report misuse to security@dvsentry.com.