Acceptable Use Policy

Authorization is required

You may only register and test AI agents and endpoints that you own or are explicitly authorized to test. When you register an external HTTP endpoint, you must confirm this authorization. Using AegisMonkey to probe, attack, or stress-test systems you do not own or have permission to test is strictly prohibited and may violate computer-misuse laws (such as the U.S. Computer Fraud and Abuse Act and equivalents elsewhere).

Prohibited uses

• Testing or attacking third-party systems without authorization.
• Targeting internal, private, or cloud-metadata network addresses, or attempting to use the Service to reach systems you could not otherwise access.
• Using the Service to develop, deliver, or stage malware, or to exfiltrate data from systems you do not control.
• Attempting to circumvent rate limits, cost guards, daily run limits, or other technical controls.
• Disrupting, overloading, or impairing the Service or its infrastructure, or that of our subprocessors.
• Violating any applicable law, regulation, export control, or third-party right.
• Submitting another person's personal data without a lawful basis to do so.

Your responsibility for endpoints

When you configure an agent as an external HTTP endpoint, AegisMonkey sends adversarial requests to the URL you provide. You are solely responsible for the destination, for having permission to test it, and for any consequences of that testing. We apply technical safeguards (including blocking private and metadata network ranges), but these do not replace your obligation to test only what you are authorized to test.

Responsible disclosure

If your testing reveals vulnerabilities in a system you are authorized to assess, handle those findings responsibly and lawfully. AegisMonkey is intended to help you fix your own systems, not to facilitate harm to others.

Enforcement

We may investigate suspected violations and may suspend or terminate accounts that violate this AUP, with or without notice, and may report unlawful activity to the appropriate authorities. If you become aware of a violation, contact us at acehugh@proton.me.