Acceptable Use Policy

This Acceptable Use Policy ("AUP") sets out what you may and may not do with the Chitin Service. It forms part of our Terms of Service. Chitin is a defensive security product; it must be used only to protect systems, never to attack or harm others.

1. Permitted use

You may use the Service to inspect, filter, monitor and protect web applications and servers that you own or are explicitly authorised to protect, in accordance with your plan and applicable law.

2. Prohibited use

You must not, and must not permit anyone else to, use the Service to:

• Protect, conceal, proxy or facilitate any website or application whose primary purpose is unlawful — including phishing, malware distribution, fraud, or the sale of illegal goods or services.
• Attack, probe, scan, overload or attempt to gain unauthorised access to any network, system or data that you do not own or are not authorised to test.
• Interfere with or disrupt the integrity or performance of the Service, or attempt to bypass or disable its licensing, security or usage controls.
• Reverse engineer, decompile or extract the Service's proprietary rulesets or code, except to the extent expressly permitted by law or by us in writing.
• Use the Service to process, store or transmit content that is unlawful, infringing, or that violates the rights or privacy of others.
• Resell, redistribute or provide the Service to third parties except under a written partner or reseller agreement with us.
• Misrepresent your identity or authority, or use the Service in any way that violates applicable export controls or sanctions.

3. Security testing

You may test the Service against your own systems. Any security testing must be limited to infrastructure you own or are authorised in writing to test, must not degrade the Service for other customers, and must comply with applicable law. If you discover a vulnerability in the Service itself, please report it responsibly to security@chitinweb.com before disclosing it publicly.

4. Fair use of shared intelligence

Some features (such as shared attacker intelligence, or "herd immunity") rely on aggregated, non-personal indicators. You must not tamper with, poison or attempt to manipulate this shared intelligence, and you must not use it for any purpose other than protecting your own systems.

5. Enforcement

We may investigate suspected violations of this AUP. Where we reasonably believe a violation has occurred, we may suspend or terminate access to the Service, with or without notice depending on the severity, and may report unlawful activity to the relevant authorities. We will use reasonable efforts to notify you where appropriate.

6. Reporting abuse

To report misuse of the Service, or a site you believe is being protected in violation of this AUP, contact abuse@chitinweb.com. Please include enough detail for us to investigate.

7. Changes

We may update this AUP from time to time. The version published at chitinweb.com with the most recent "last updated" date is the one in effect.

8. Contact

Questions about this policy can be sent to legal@chitinweb.com.