# ✅ Acceptable Use Policy

Effective Date: October 16, 2025

## Purpose

This Acceptable Use Policy ("AUP") defines permitted and prohibited uses of TheGAVL Red Team Security Tools. Violation of this policy may result in immediate account termination and reporting to law enforcement.

## ✅ Permitted Uses

- Authorized Penetration Testing - With explicit written permission from system owners
- Personal Lab Environments - Testing on systems you own and control
- Bug Bounty Programs - Following the specific rules of each program
- Security Research - In isolated, controlled environments
- Educational Training - On designated practice platforms (HackTheBox, TryHackMe, etc.)
- Vulnerability Disclosure - Following responsible disclosure practices
- Security Audits - As part of professional security assessments
- Compliance Testing - For regulatory requirements (PCI-DSS, HIPAA, etc.)

## ❌ Prohibited Activities

### Illegal Activities

- Unauthorized access to computer systems (CFAA 18 U.S.C. § 1030)
- Computer fraud, identity theft, or data theft
- Cyber stalking, harassment, or intimidation
- Distribution of malware or ransomware
- Any activity prohibited by federal, state, or international law

### Unauthorized Testing

- Testing systems without explicit written permission
- Exceeding the scope of authorized testing
- Testing after authorization has expired
- Testing production systems without proper safeguards

### Malicious Use

- Using tools for personal gain through illegal means
- Selling stolen data or credentials
- Extortion, blackmail, or threats
- Sabotage or destruction of systems
- Denial of service attacks

### Misuse of Service

- Sharing account credentials with others
- Circumventing usage limits or rate limiting
- Creating multiple accounts to avoid restrictions
- Reverse engineering or copying the Service
- Automated scraping or data mining of the Service

## Required Documentation

For all authorized testing, you must maintain:

- Written authorization from the system owner
- Scope of work document defining permitted activities
- Timeline and testing windows
- Emergency contact information
- Incident response procedures

## Professional Ethics

Users are expected to follow industry-standard ethical guidelines:

- Respect privacy and confidentiality
- Practice responsible disclosure
- Minimize impact on production systems
- Document findings professionally
- Do not exploit discovered vulnerabilities beyond proof-of-concept

## Reporting Requirements

Users must report:

- Any suspected unauthorized access to your account
- Discovery of vulnerabilities in the Service itself
- Suspected abuse by other users
- Accidental unauthorized testing

## Enforcement

Violations of this AUP will result in:

- First Offense: Warning and account review
- Serious Violations: Immediate account termination
- Illegal Activity: Reporting to law enforcement
- Legal Action: Civil or criminal prosecution as applicable

## Monitoring and Logging

To enforce this policy, we:

- Log all tool usage and access attempts
- Monitor for suspicious patterns
- Implement rate limiting and abuse detection
- Cooperate fully with law enforcement investigations

## Contact for Questions

If you have questions about permitted use:

- Email: legal@thegavl.com
- Support: support@thegavl.com

## Updates to This Policy

We may update this AUP at any time. Continued use of the Service constitutes acceptance of the updated policy.

Last Updated: October 16, 2025

← Back to Home