Acceptable Use Policy

1. Authorisation is your responsibility

You may use the Service only in respect of systems you own or are expressly authorised in writing to assess. Written authorisation should identify the systems in scope, the permitted activities, and the period covered.

This applies to the free preview as well as to full scans. The preview is passive and reads only what any visitor receives; every deeper scan requires proof of ownership of the exact host first. Proving ownership of a host you do not control, or scanning an application without authorisation, is abuse and may lead to removal of your trust page and termination of your account.

Unauthorised access to or testing of a computer system may violate the Computer Fraud and Abuse Act (18 U.S.C. § 1030) in the United States, the Computer Misuse Act 1990 in the United Kingdom, Directive 2013/40/EU in the European Union, and comparable laws elsewhere. Penalties include criminal liability.

If you are an employee or contractor, your employer or client must authorise the assessment. Your personal access to a system does not by itself constitute authorisation to test it.

2. Prohibited activities

• Assessing, probing or attacking any system without authorisation.
• Using the Service to plan, facilitate or conceal unlawful activity.
• Uploading malware, or content that infringes intellectual property or violates law.
• Harassment, threats, or content that is unlawful, defamatory or hateful.
• Copying, redistributing, reselling or publishing the fix prompts, finding explanations, checklist content or policy templates.
• Automated scraping or bulk extraction beyond our provided export functions.
• Circumventing plan limits, rate limits or access controls.
• Sharing account credentials, or allowing multiple individuals to use a single seat.
• Misrepresenting what the Service reported as a certification, audit or attestation, or as a statement that your application is secure.
• Using the VibeLock name, logo or badge other than as the Badge and Brand Guidelines allow, including showing a screenshot of a badge or a badge issued for a different application.
• Sharing, reselling or republishing the Vibe Coding Security OS or the free checklist other than as the Digital Products License allows.
• Interfering with the Service, including denial of service, or testing our own infrastructure outside our disclosure policy.

3. Testing VibeLock itself

We welcome good-faith security research into our own platform. Do it under our vulnerability disclosure policy at vibelock.ai/security/disclosure, report findings to hello@vibelock.ai with the word security in the subject line, do not access data that is not yours, do not degrade the service, and give us reasonable time to remediate before disclosure. Research conducted within that policy will not be treated as a breach of this one.

4. Enforcement

We may investigate suspected violations and may suspend or terminate access immediately, without refund, where we reasonably believe this policy has been breached. Where required, we will report unlawful activity to the relevant authorities.

Report abuse to hello@vibelock.ai.