Acceptable Use Policy

• Add only domains, websites, APIs and IP addresses that your organisation owns or controls and has the authority to have tested.
• Do not add a competitor’s, a client’s or anyone else’s asset unless you hold their written permission to have it tested and can show it on request.
• Do not try to get around ownership verification, for example by placing a verification record or file on a system you do not control.

• Do not use the service, or anything in its reports, to attack, disrupt or gain access to any system.
• Do not try to make the service run checks it does not offer, or increase how often or how hard it tests.
• Do not probe, scan or load-test AIM Safe itself without our written permission. Report a vulnerability in AIM Safe to pending.
• Do not resell or share the service, or a report about someone else’s systems, without our agreement.

Many hosting and cloud providers have their own testing rules. You are responsible for making sure those rules allow the checks we run on your assets.

If we have reason to believe an asset is not yours or the authorisation is not valid, we stop checks on it immediately. We may suspend or close the account, keep the records needed to show what happened, and work with the asset’s real owner or with the authorities.

If you believe AIM Safe is checking a system you own without your permission, email pending with the address or domain. We will stop checks on it while we investigate.