Acceptable Use Policy

• Passive scans of any public website, for information and awareness
• Deep scans of domains you own or have written permission to test, after verifying ownership
• Sharing reports for your own sites, or reporting issues responsibly to other site owners

• Using Watchpost or its results to attack, exploit, extort or disrupt any system
• Verifying or deep-scanning domains you are not authorised to test
• Bypassing rate limits, for example with many accounts, rotating IP addresses or automated sign-ups
• Mass-scanning to build target lists, or reselling scan results
• Interfering with the service, probing it without following our disclosure policy, or overloading it
• Anything that breaks the law where you or the target are located

We may throttle, block, suspend or close accounts and IP addresses that break this policy, without notice where necessary, and may cooperate with lawful requests from authorities.

If you believe Watchpost is being misused against your systems, email [email protected] with the time, target and any logs. Site owners can also opt out of scanning.