Acceptable Use Policy

You may only scan systems that you own or that you have explicit written authorization to test. Scanning any system without permission is prohibited and may be unlawful. You affirm this authorization before every scan, and you are solely responsible for the targets you submit.

Nandix is a non-destructive scanner: it sends HTTP and TLS requests and analyzes responses. You may not use Nandix, or any information it produces, to exploit a vulnerability, exfiltrate data, gain unauthorized access, or otherwise cause harm to any system.

• Unauthorized scanning of systems you do not own or have permission to test.
• Denial-of-service, flooding, or any attempt to degrade a target’s availability.
• Data exfiltration, credential theft, or exploitation of any finding.
• Bulk or automated abuse intended to circumvent rate limits or fair-use controls.
• Scanning government, military, or critical-infrastructure targets without explicit, documented authorization from the system owner.
• Any use that violates applicable Indian or international law.

Nandix applies per-user and per-IP rate limits to keep the service available for everyone. You may not attempt to bypass, evade, or overwhelm these controls. Excessive or automated use beyond reasonable limits may be throttled or blocked.

If you become aware of misuse of Nandix, or believe a target has been scanned without authorization, report it to nandix@shunyax.com.

Violations of this policy may result in suspension or termination of access, removal of scan data, and referral to the appropriate authorities where unlawful activity is suspected. We may take any action we deem necessary to protect the service and its users.