Acceptable Use Policy

1. Purpose & scope

This Acceptable Use Policy ("AUP") sets out what you may and may not do when using services provided by Cyber Crime Guards Ltd — including security monitoring and managed detection and response, managed antivirus and endpoint protection, infrastructure protection, penetration testing and audits, proxy and IP-access services, training, and incident response. It applies to every customer, authorised user and partner, and forms part of our Terms of Service. Partners are responsible for ensuring their own customers comply with it.

2. General principles

You must use our services lawfully, responsibly and in a way that does not harm our systems, our other customers, or third parties. You are responsible for all activity conducted through your account and any accounts you manage on behalf of others.

3. Prohibited activities

You must not use the services to host, transmit, facilitate or enable any of the following:

• Any illegal content or activity under applicable law, including the laws of England & Wales.
• Child sexual abuse material (CSAM) or any content that exploits or endangers minors — reported immediately, without exception.
• Unsolicited bulk messaging (spam), phishing, or deceptive or fraudulent schemes.
• Malware, ransomware, botnet command-and-control, exploit kits or other malicious code.
• Unauthorised access to systems, networks or data ("hacking"), credential stuffing, or port/vulnerability scanning of systems you do not own or have permission to test.
• Denial-of-service (DoS/DDoS) attacks, traffic amplification, or any activity that degrades or disrupts other networks.
• Infringement of intellectual-property rights, including piracy and counterfeit goods.
• Harassment, threats, incitement to violence, or content promoting terrorism or unlawful discrimination.
• Distribution of another person's private or personal data without a lawful basis.

4. Security testing & offensive services

Penetration testing, vulnerability assessment, red-teaming and similar offensive services are powerful and, if misused, unlawful. When engaging or scoping these services you must:

• only ever request or authorise testing of systems, applications, networks or accounts that you own or have a clear, documented right to have tested;
• provide accurate authorisation and scope, and obtain any consents or permissions required from third parties (for example hosting, cloud or SaaS providers) before testing begins;
• not use our services, findings, tooling or access to attack, disrupt or gain unauthorised access to any system belonging to a third party;
• not use a test as a pretext to access, exfiltrate or damage data you are not entitled to.

Requesting testing of systems you are not authorised to test is a serious breach of this policy and may be a criminal offence. We will refuse or stop any engagement where authorisation is unclear.

5. Deployed software & access

Where we deploy monitoring agents, antivirus, endpoint-detection software or protective controls, or where we are granted access to your systems, you must:

• only deploy our software and agents onto systems you are authorised to protect and monitor;
• not copy, resell, reverse-engineer, tamper with or circumvent the tools, agents or controls we provide, except as expressly permitted;
• keep any credentials, access tokens or connection details we issue secure, and use them only for the agreed purpose;
• not use access we provide, or the visibility it gives us, to monitor or intercept individuals unlawfully or without any notices or consents the law requires.

6. Proxy & IP services

Where we provide access to proxy or IP-routing services — including residential, ISP (static residential), datacentre and mobile proxies — you receive a licensed right to route your own lawful traffic through the network. This access is powerful and is provided strictly on the conditions below. You are responsible for all traffic routed through any IP or endpoint issued to you.

Permitted use. Proxies may be used only for lawful, good-faith purposes such as market, pricing and competitor research; advertisement and brand-protection verification; search-engine and SEO monitoring; website and application QA; uptime and geo-availability testing; threat-intelligence and anti-fraud research; and the collection of publicly available data. In every case you must respect the terms of service, rate limits and robots directives of the destination, and all applicable law.

Prohibited use. You must not use our proxies or IP services, and must not allow anyone using your account to use them, to:

• brute-force, password-spray, credential-stuff, or otherwise guess, crack, reuse or test credentials against any account, login or system;
• gain or attempt to gain unauthorised access to any system, network, account or data ("hacking"), or scan, probe or test the security of any system you do not own or have explicit written permission to test;
• carry out or assist any denial-of-service (DoS/DDoS), flooding, amplification, load- or stress-testing, or any activity designed to overload, degrade or disrupt a service or infrastructure;
• send spam or unsolicited bulk messages, operate phishing or social-engineering campaigns, or distribute malware, ransomware, exploit kits or botnet command-and-control traffic;
• commit fraud of any kind — including payment, card or banking fraud ("carding"), account takeover, mass creation of fake or fraudulent accounts, ad-fraud, click-fraud or artificial traffic inflation;
• access, host or transmit child sexual abuse material (CSAM) or any content that exploits or endangers minors;
• harvest personal data without a lawful basis, or scrape or collect data in breach of a destination's terms of service, of applicable law, or of technical measures used to control access;
• bypass, defeat or circumvent authentication, paywalls, IP or account bans, CAPTCHAs or bot-detection for any unlawful, deceptive or abusive purpose;
• infringe intellectual-property rights, or purchase goods, tickets or limited inventory in breach of a vendor's terms;
• resell, sub-licence, share or redistribute proxy access, IP allocations or credentials to any third party without our prior written authorisation.

We verify customer identity (KYC) before granting access, and may log and monitor usage for abuse to the extent permitted by law. Where these conditions are breached we will suspend or terminate access immediately and without refund. Serious abuse is reported to the relevant authorities and to our upstream network suppliers, with whom we cooperate on abuse investigations.

7. Findings, tools & intelligence

Reports, findings, proof-of-concept code, dashboards and threat intelligence we provide are confidential and licensed for your internal security use only. You must not publish, resell or weaponise them, or use exploit material against any system other than as authorised in your engagement. You must not present our work, reports or brand as your own or as certification of any third party's security.

8. Identity verification

To prevent abuse, we may require identity verification (KYC) and proof of authority over the systems to be tested, monitored or protected, before or during service provision, and may decline or withdraw service where verification cannot be completed or where we reasonably suspect misuse.

9. Reporting abuse

If you believe our services are being used in breach of this policy, please report it through the contact form on our website with as much detail as possible (IP addresses, domains, timestamps and logs). We review abuse reports promptly.

10. Enforcement & consequences

Breaching this policy may result in warnings, content removal, throttling, suspension or immediate termination — proportionate to the severity of the breach — without refund. Serious or repeated abuse will lead to permanent termination.

11. Cooperation with authorities

We cooperate with law-enforcement and regulatory bodies and will disclose information and preserve evidence where legally required or where necessary to investigate serious abuse.

12. Contact

Questions about this policy and reports of abuse can both be submitted through the contact form on our website.