Acceptable Use Policy
This Acceptable Use Policy (AUP) governs the use of BreachSpider and supplements the Terms of Service. Violation of this policy may result in immediate account termination.
Prohibited Uses
The following uses of BreachSpider are strictly prohibited:
Facilitating unauthorized access. Using BreachSpider CVE data or intelligence to plan, prepare, or conduct unauthorized access to any computer system, network, or industrial control system.
Cyberattack planning. Using BreachSpider data to identify targets for cyberattacks, ransomware deployment, or any offensive cyber operation against third parties.
Credential sharing. Sharing account credentials outside your licensed organization or with personnel who do not work for your organization.
Reverse engineering. Attempting to reverse engineer SAGE, BCS scoring methodology, asset matching algorithms, or any proprietary BreachSpider technology.
Data resale or redistribution. Using the API or any platform feature to bulk-export CVE data, enrichment data, or SAGE analysis for resale, redistribution, or to build competing products.
False asset information. Submitting fabricated or intentionally misleading asset information to manipulate CVE matching results or inflate risk scores.
Rate limit circumvention. Attempting to exceed API rate limits through technical means including rotating IP addresses, credential stuffing, or using multiple accounts.
Illegal purposes. Using the platform for any purpose that violates applicable law, including export control laws, sanctions, or computer fraud statutes.
MSSP misuse. MSSP tier customers may not use cross-client visibility features to access data belonging to organizations for whom they do not have a current service agreement.
Enforcement
AUP violations result in immediate account suspension without refund. Serious violations -- including use of the platform to facilitate cyberattacks against critical infrastructure -- will be referred to appropriate law enforcement agencies including FBI Cyber Division and CISA.
We reserve the right to terminate accounts at our sole discretion for AUP violations, with or without prior notice depending on severity.
Permitted Security Research
Security researchers, penetration testers, and red team operators may use BreachSpider to support authorized engagements. Use of BreachSpider for security assessments of your own systems or systems you have explicit written authorization to test is permitted and encouraged.
Reporting Violations
Report suspected AUP violations, misuse of the platform, or abuse of API access to [email protected]. We take all reports seriously and will investigate promptly.
Contact
CITED Relevance LLC
Jefferson, Georgia
[email protected]