Acceptable Use Policy
ZeroDayAPI models are built for defensive and authorized security work. This is what that means in practice.
Draft: this page is being finalised with legal counsel and may change.
Permitted use
- Penetration testing and API testing of systems you own or are authorized in writing to assess.
- Reverse engineering, malware analysis and exploit triage for defense and research.
- Incident response, threat hunting and log or IOC analysis.
- Vulnerability research and validating that a fix works.
Not permitted
- Attacking, probing or disrupting systems without authorization.
- Building or deploying malware or tools intended to harm people or organizations.
- Targeting critical infrastructure, individuals, or any unlawful activity.
- Sharing or reselling API keys, or evading rate limits and access controls.
Enforcement
We may investigate suspected misuse and limit or suspend access without notice where needed to protect the service or others.
Report abuse
Contact [email protected].