Acceptable Use Policy

• You may only scan assets you own or are authorized in writing to test. A paid subscription is not authorization to scan any target.
• For Active Scan, you authorize each target explicitly — by proving domain ownership, or by attesting your authorization for a specific domain behind a step-up re-authentication. That attestation is recorded and auditable.
• You remain responsible for ensuring your authorization is current and in scope.

• Active Scan sends traffic to the target (port scans, vulnerability probes, content discovery). It is available on eligible plans and only against targets you have authorized.
• Scope controls always apply: the platform refuses targets that resolve to private, internal, loopback, or cloud-metadata addresses, regardless of your plan or any attestation.
• You must keep within the authorized scope, rate, and timing; do not use the platform to disrupt, degrade, or deny service.

• Scanning or testing targets you are not authorized to test.
• Attempting to bypass scope, authorization, or network safety controls.
• Using results to facilitate unauthorized access, extortion, or harm.
• Violating applicable law or any third party's terms.

Misuse, or scanning targets without authorization, may result in suspension or termination of your account and other appropriate action. We may preserve and review audit logs for this purpose.

• Scan inputs, results, and findings are stored to operate the service and are scoped to your account/organization.
• Authorization decisions and sensitive actions are recorded in an audit log for security and accountability.
• Retention periods follow our Privacy Policy; audit records may be retained longer where required for security or legal reasons.

You are responsible for the targets you select and the scans you run. To the maximum extent permitted by applicable law, Zero-Recon limits its liability as set out in the Terms of Use. Nothing here purports to exclude liability that cannot be excluded by law.

To report misuse of the platform or a security incident, contact us via the contact page. We investigate reports of unauthorized scanning.

We may update this policy. On a material change we will record a new version and ask you to accept it again before your next active scan. Your acceptance is recorded with its version and timestamp.