Acceptable Use Policy

Using the free tools

The tools run entirely in your browser and we never see your files, so there is very little we could police even if we wanted to. Use them for anything lawful, commercially or personally, with no attribution required.

• Do not rebadge the tools as your own product or embed them in a paid service without asking.
• Do not use them to process material you have no right to hold.

Using the API

The API fetches public pages on your behalf. That means it can be abused, so:

• Only audit pages you own or have permission to test. The API is not a scanner for other people’s infrastructure.
• Stay inside the rate limits. They are published and every response tells you where you are. Do not rotate keys to get around them.
• Do not resell raw API output as your own audit product. Build something on top of it and that is fine.
• One key per environment, not per request. Keys are free; there is no reason to hoard them.

Private and reserved IP ranges are refused at every redirect hop, so the API cannot be pointed at internal infrastructure. That is deliberate and not negotiable.

Work we will not take

We turn down projects. Being clear about which ones saves everybody a conversation:

• Anything unlawful in the country it operates in.
• Adult content, gambling, weapons, or products that mislead about health outcomes.
• Deceptive marketing — fake reviews, invented testimonials, fabricated statistics, made-up scarcity.
• Search work built on private link networks, bought placements or scraped content.
• Anything designed to impersonate another business or person.

Fraud and abuse

We take payment fraud seriously in both directions. Orders that look fraudulent are held and queried before any work starts, and we will always ask rather than assume. If you believe an order was placed on your card without permission, email [email protected] and we will cancel and refund it without argument.

Equally: we will never ask you to pay to an account other than the one on the invoice, and we will never call or message asking you to change payment details. If you receive that request, it is not from us. Check with us by email before acting on it.

Sanctions and restricted parties

We do not knowingly work with individuals, businesses or governments subject to international sanctions, and we do not provide services where doing so would breach applicable export controls. We are a small agency and do not run automated screening; we act on the information we have and stop immediately if we learn otherwise.

What happens if you break this

For the API and free accounts, keys are revoked and the account is closed. For client work, we stop and invoice for what has been delivered. In both cases you get an email explaining exactly why, and a chance to reply if we have misread the situation.