Legal

TERMS OF SERVICE

Last updated: 17 August 2026

These Terms of Service ("Terms") govern your use of the Attack Surface Management system ("ASM", "the system"). By creating an account or using the system, you agree to these Terms. If you do not agree, do not use the system.

AUTHORIZED USE ONLY

ASM is a security scanning and asset-discovery tool. You may only submit domains, IP addresses, or other assets for scanning that you own or have explicit, documented authorization to test. Scanning any target without proper authorization is strictly prohibited and may be unlawful under computer misuse legislation in your jurisdiction.

Marking a target as "authorized" in this system is a statement, made by you, that you hold that authorization. The system will refuse to run scans against targets not marked authorized, but this is a safeguard, not a substitute for your own legal responsibility to obtain real authorization.

ACCOUNT RESPONSIBILITIES

• You are responsible for keeping your password and verification codes confidential.
• You must provide accurate registration information.
• You are responsible for all activity that occurs under your account.
• Notify an administrator immediately if you suspect unauthorized access to your account.

PROHIBITED ACTIVITY

• Scanning, probing, or attacking any target without proper authorization.
• Attempting to bypass authentication, rate limiting, or access controls.
• Uploading malicious content or attempting to disrupt the availability of the system.
• Sharing your account credentials with others.

NO WARRANTY

This system is provided as an academic/educational prototype "as is," without warranty of any kind, express or implied, including but not limited to accuracy, completeness, or fitness for a particular purpose. Vulnerability findings and risk scores are best-effort and should not be the sole basis for security decisions on production systems.

LIMITATION OF LIABILITY

To the fullest extent permitted by law, the operators of this system are not liable for any indirect, incidental, or consequential damages arising from your use of the system, including damages resulting from unauthorized scanning activity carried out by a user of this system.

ACCOUNT SUSPENSION AND TERMINATION

We may suspend or disable an account that violates these Terms, including attempts to scan unauthorized targets, abuse of the authentication system, or activity that disrupts other users.

CHANGES TO THESE TERMS

These Terms may be updated as the system evolves. Continued use of the system after changes are posted constitutes acceptance of the revised Terms.

CONTACT

Questions about these Terms can be directed to a system administrator.