Tillping Acceptable Use Policy

Version: 2026-11-01-v3

Effective date: 1 November 2026

Last updated: 1 November 2026

This Acceptable Use Policy (this "AUP") forms part of the Tillping Terms of Service (the "Terms"). Capitalized terms not defined in this AUP have the meanings given to them in the Terms. This AUP applies to every person who uses the Service, whether or not that person holds an Account.

1. Authorized Targets Only

1.1 You may submit a Target only if you own it or hold the express authorization of its owner or operator to test it by means of automated HTTP requests (Terms, Section 6). This applies to every type of Scan, whether or not Verification is required for it.

1.2 A Free Scan relies only on your Authorization Declaration (Terms, Section 2), and we do not check it before the Free Scan runs (Terms, Section 5.4(a)). You shall not give an Authorization Declaration that is false. Giving a false Authorization Declaration is a breach of this AUP and of Section 6 of the Terms, and your liability for it is governed by Sections 6.2 and 12 of the Terms.

1.3 Without limiting Sections 1.1 and 1.2, you shall not use the Service to:

(a) scan the systems of a competitor, customer, former employer or any other third party without that party's authorization;
(b) scan a Target after your ownership or authorization has ended, or retain a domain as a Verified Domain after you have ceased to control it, including for any Monitoring we may make available in the future;
(c) survey, map or catalog third-party systems for weaknesses, including by scanning lists of URLs; or
(d) test the security of a payment provider, hosting platform or other service in breach of its terms.

2. No Harm to Targets or Networks

You shall not use, or attempt to use, the Service to:

(a) attack, disrupt, overload or degrade any Target, network or service, including by denial-of-service activity or by repeated or automated Scans of the same Target beyond what is reasonably necessary to diagnose a problem;
(b) send requests that you know, or ought reasonably to know, will trigger harmful actions on a Target, such as creating orders, sending emails or altering data;
(c) reach private, internal, loopback, link-local, cloud-metadata or other non-public addresses, or circumvent our network-safety controls, including by DNS rebinding, redirects or unusual URL encoding;
(d) relay or proxy traffic, or conceal the origin of traffic;
(e) introduce malware or other harmful code; or
(f) harass, threaten, defame or harm any person.

3. Integrity of the Service

You shall not:

(a) circumvent usage limits, rate limits, daily caps or payment requirements, including by operating multiple Accounts, rotating IP addresses or automating use of Free Scans;
(b) access the Service by automated means, such as bots, scrapers or scripts, other than through an interface we publish for that purpose;
(c) probe, scan or test the vulnerability of the Service itself, or breach or circumvent its security or authentication measures;
(d) reverse engineer, decompile or disassemble the Service, except to the extent applicable law expressly permits notwithstanding this restriction;
(e) interfere with any other user's use of the Service;
(f) copy, resell, sublicense or frame the Service, Reports or AI Content, or use them to develop a competing product; or
(g) represent a Report as a security audit, certification or endorsement by Tillping.

4. No Credentials or Sensitive Data

You shall not submit API keys, webhook signing secrets, passwords, access tokens, payment card data or other credentials anywhere in the Service, including in a Target URL or in correspondence with us. You shall not submit special categories of personal data, or any other person's personal data beyond what is strictly necessary to identify a Target.

5. Lawful Use

You shall not use the Service in breach of any applicable law or regulation, including laws on computer misuse, privacy and data protection, consumer protection, sanctions and export control, or to assist any other person in doing so.

6. Security Research

If you discover a vulnerability in the Service, please report it to support@tillping.online with "Security" in the subject line, without including any secrets, and do not exploit or disclose it before we have had a reasonable opportunity to address it. Good-faith reporting of a vulnerability you have discovered in the course of ordinary use is not a breach of Section 3(c).

7. Reporting Abuse

If you believe that the Service has been used to scan your systems without authorization, or that any person is otherwise in breach of this AUP, please email support@tillping.online with "Abuse" in the subject line. Please state the affected URL or host, the approximate date and time of the activity (including the time zone), and any relevant request details from your logs. Requests made by the Service identify themselves with the user agent TillpingProbe/1.0 (+https://tillping.online/security). We review every report and act on it in accordance with Section 8.

8. Enforcement

8.1 If we reasonably believe that this AUP has been, or is likely to be, breached, we may, without liability to you and without prejudice to any other right or remedy: block a Target or host; refuse, stop or limit Scans; remove a Verified Domain; suspend or close the Account concerned (Terms, Section 16); retain records of the relevant activity; and, subject to applicable law and our Privacy Policy, disclose relevant information to the affected party, to our service providers or to competent authorities.

8.2 Your liability for breach of this AUP, including your obligation to indemnify us, is governed by the Terms (Sections 6, 11.3 and 12).

9. Changes

We may amend this AUP in accordance with Section 17 of the Terms.