Acceptable Use Policy
Rules that protect customers, targets and the service.
Authorization required
Use SHEMANE only against systems you own or are explicitly authorized to test. Keep evidence of scope and authorization. Do not evade target restrictions or continue after authorization ends.
Prohibited activity
No unlawful access, vulnerability or port scanning, credential stuffing, password spraying, brute force, phishing, malware, denial of service, traffic amplification, data exfiltration, surveillance, evasion of CAPTCHA/MFA, or testing internal/private networks.
Traffic and credentials
Use the lowest practical cadence and dedicated least-privileged test accounts containing synthetic data. Never use stolen credentials or a scenario designed to cause harmful state changes.
Enforcement
SHEMANE may pause a monitor or account to protect a target, investigate credible abuse or comply with law. Material violations may lead to termination and preservation of narrowly necessary evidence.
Last substantive version: 2026-09-16. Seek qualified Belgian legal advice before relying on this draft for commercial contracting.