Acceptable Use & Authorized Testing

Users may assess only assets they own or are legally authorized to test.

Authorization must cover:

• The specific target.
• The testing activity.
• The testing period.
• Relevant third-party infrastructure.
• Applicable hosting and cloud-provider requirements.

Users may not use Teisoft services to:

• Access systems without authorization.
• Test unrelated third-party infrastructure.
• Conduct destructive testing.
• Conduct denial-of-service attacks.
• Steal, alter, expose, or destroy data.
• Deploy malware, ransomware, or persistence mechanisms.
• Collect credentials unnecessarily.
• Conduct phishing without an approved scope.
• Evade law enforcement.
• Attack competitors.
• Conduct surveillance or harassment.
• Circumvent sanctions or export restrictions.
• Hide the origin of malicious activity.
• Interfere with Teisoft or third-party services.
• Share accounts or credentials improperly.
• Upload unlawful or infringing content.

Testing involving healthcare, payment, government, industrial-control, life-safety, or similarly sensitive environments requires prior written review and approval.

Users must minimize access to personal or confidential information.

When evidence is required, users must collect the minimum information necessary to document the finding and stop when impact has been established.

Teisoft may:

• Throttle testing.
• Suspend accounts.
• Remove targets.
• Request authorization evidence.
• Preserve relevant records.
• Notify the affected customer.
• Cooperate with lawful investigations.
• Terminate service.

In urgent situations, Teisoft may act without advance notice.

Suspected misuse should be reported to [email protected].