Acceptable Use Policy

Version 1.0 — effective July 14, 2026

This Acceptable Use Policy ("AUP") applies to all use of the swaudit Service, including demo and interactive sandbox sessions. Capitalized terms have the meanings given in the Terms of Service. swaudit exists to analyze potentially malicious software safely — that is permitted and expected. What this AUP prohibits is using the Service itself as a weapon, a staging ground, or a general-purpose computer.

1. Analyze only what you're authorized to analyze

Submit only software that you have the legal right to possess and to analyze. If software is covered by a license or agreement, you are responsible for ensuring your analysis of it is permitted — for example, as authorized security research or pre-procurement evaluation. Do not submit software obtained unlawfully.

2. No attacks on third parties

Do not use the Service, its sandboxes, or its network egress to:

• attack, scan, probe, flood, or disrupt any third-party system;
• exfiltrate real data belonging to others, or stage, host, or distribute malware to others;
• operate command-and-control, phishing, or spam infrastructure;
• conceal the origin of traffic directed at third parties.

Executing a malicious sample inside the sandbox for analysis is the product working as intended; directing the sandbox at the outside world is prohibited. We monitor and intercept sandbox egress and will act on abuse.

3. No attacks on the Service

Do not:

• attempt to escape, subvert, or disable the sandbox, instrumentation, or resource limits;
• access or interfere with other users' sessions, submissions, or reports;
• probe or test the security of the Service itself without our prior written permission — to report a vulnerability in good faith, use the contact channels below; good-faith reports are welcome;
• circumvent authentication, tokens, session limits, timeouts, or rate limits, or share access credentials beyond your organization.

4. No prohibited content

Do not submit or transmit content that is illegal to possess or distribute, content that infringes third-party rights, or personal data you are not authorized to share with us. Do not use interactive sessions as general-purpose remote desktops, proxies, or cryptominers, or for anything other than evaluating candidate software.

5. Report integrity

Do not alter a signed Report and present it as issued by swaudit, forge or misattribute Report signatures, or represent that swaudit certifies, endorses, or guarantees any software. Reports document observed behavior; how you characterize third-party software publicly is your responsibility.

6. Abuse of forms and communications

Do not spam contact or demo-request forms, submit false identities to obtain access, or use the Service to harvest information about other users.

7. Enforcement

We may investigate suspected violations, and may suspend or terminate sessions or access immediately and without notice where needed to protect the Service, other users, or third parties. We may preserve and share evidence of unlawful activity with law enforcement as described in the Privacy Policy.

8. Contact

Questions, abuse reports, or vulnerability reports: use the contact form on swaudit.net, or email rapidvps@gmail.com.