Acceptable Use Policy

This Acceptable Use Policy (“AUP”) governs your use of CodeCheck and is incorporated into our Terms & Conditions. CodeCheck is a security tool; because it can probe live systems, responsible use is essential. Violating this AUP may result in suspension or termination without refund and may expose you to civil and criminal liability.

You may only scan or test systems that you own or that you have explicit, verifiable authorization to test. By initiating a scan, you represent and warrant that you have all necessary rights and permissions to do so.

• You must not scan domains, IP addresses, applications, or infrastructure belonging to third parties without written permission.
• For deeper scans, we may require domain ownership verification before testing proceeds.
• Unauthorized scanning may violate the U.S. Computer Fraud and Abuse Act (CFAA), state computer-crime laws, and international equivalents.

CodeCheck probes live systems and, when you opt in, performs active testing that sends bounded but genuine state-changing or load-generating requests (for example write-then delete markers, timing payloads, repeated login attempts, injection markers, and metadata request canaries). It also offers automated recurring scans of domains you enroll for monitoring.

• You must have authorization that covers active testing and repeated, automated scanning — not just a single read-only look — for every target you test or enroll.
• You are responsible for any impact these requests have on the target and on any third-party infrastructure it depends on.
• We record your consent to each scan (including active-mode acceptance) with a timestamp and IP address. Providing false authorization or scanning without permission is a serious violation and may be unlawful.

You must not use the Service to:

• access, scan, or attack systems without authorization, or facilitate anyone else in doing so;
• use findings, exploit walkthroughs, or other output to gain unauthorized access to, damage, disrupt, or exfiltrate data from any system;
• engage in denial-of-service, excessive load, or other activity that degrades systems or the Service;
• violate any law, regulation, third-party terms, or the privacy or intellectual property rights of others;
• upload or transmit malware, or use the Service to develop or deliver malicious tools;
• reverse engineer, resell, or misuse the Service, or attempt to circumvent authentication, rate limits, or usage controls;
• misrepresent your identity or authorization, or share your account to evade limits.

Security findings and exploit walkthroughs are provided for defensive and remediation purposes only. You agree to handle them responsibly, keep them confidential where appropriate, and use them solely to secure systems you are authorized to protect.

We may investigate suspected violations and cooperate with law enforcement. We may suspend or terminate access immediately, without notice and without refund, for conduct we reasonably believe violates this AUP or creates legal or security risk. You agree to indemnify us for claims arising from your misuse of the Service.

If you believe someone is misusing CodeCheck, or that your systems were scanned without authorization, contact Dealer OS LLC at bekzod@dealer-os.io.