Acceptable Use Policy

You may not use PatchVex to:

• Scan, test, or analyze a target you are not authorized to scan (see Security Testing Authorization)
• Attempt to exploit a vulnerability found through PatchVex against a system you are not authorized to access
• Attempt to steal credentials, perform credential stuffing, or carry out password attacks
• Send phishing content or distribute malware or ransomware
• Attempt to gain or maintain unauthorized persistent access to a target system
• Exfiltrate data from a target you are not authorized to access
• Send or attempt to cause denial-of-service or distributed denial-of-service conditions against any system, including PatchVex's own infrastructure
• Perform destructive testing — actions intended to damage, corrupt, or degrade a target beyond what read-only analysis requires
• Generate excessive traffic intended to disrupt a production service
• Modify a target system without the target owner's authorization
• Access data outside the scope you are actually authorized to test
• Attempt to evade or bypass a target's own security controls beyond what its owner has authorized
• Attempt to bypass, disable, or interfere with PatchVex's own usage limits, safety controls, or security measures
• Use PatchVex to facilitate any activity that is illegal in the jurisdictions involved

This list describes activity that is out of bounds when using PatchVex — it is not intended to restrict legitimate, properly authorized security research or testing conducted through appropriate channels outside PatchVex.

Enforcement

We may suspend or restrict access to PatchVex for activity that violates this policy. Where practical, we will attempt to notify the account holder. For activity that appears to pose an immediate risk to PatchVex's infrastructure or to a third party, we may act before notice.