Acceptable Use Policy

Last updated: 2026-10-24 (draft)

Allowed

• Scanning applications you own or have written authorization to test
• Using reports and fix prompts to harden your own apps
• Sharing your own report links

Not allowed

• Scanning third-party apps without authorization
• Using VibeScanHQ to find targets for exploitation
• Attempting to bypass SSRF protections, rate limits, or domain verification
• Abusive automated traffic against our API
• Uploading or exfiltrating personal data of others via the service

Enforcement

We may rate-limit, block, or terminate accounts that violate this policy, and we may report clear criminal abuse to authorities.