ProbeHunt

Acceptable Use Policy

DRAFT · last updated 25 Oct 2026 · pending review by legal counsel

ProbeHunt exists to help people secure what they own. In one sentence: only test what you own or are explicitly authorized to test, and never use ProbeHunt to harm anyone.

You may

  • Check domains and applications you own or control, after verifying ownership.
  • Check assets of a client or employer when you hold their explicit, written authorization covering the scope and time window.
  • Share your own reports with your team, vendors, auditors or clients.

You must not

  • Verify, scan or monitor any asset you do not own or are not authorized to test — including by tricking an owner into adding a verification record.
  • Use the Service for denial-of-service, load or “stress” testing against third parties, or as a booter/stresser, or to sell attack capacity to others.
  • Attempt to bypass ownership verification, rate limits, scope restrictions or other safety controls, or to access other customers’ data.
  • Use findings to exploit, extort, publicly expose or otherwise harm the owner of an asset.
  • Automate requests to the Service beyond published limits, or resell the Service without our written agreement.
  • Use the Service in violation of any law, including Indonesia’s ITE Law (UU 11/2008 as amended) and the laws of the place where the asset is hosted.

Safety controls we apply

  • Ownership verification before any check; checks run only against the verified domain.
  • Passive, read-only checks in the free tier; per-IP and per-domain rate limits.
  • Logging of verification, check and monitoring activity for abuse investigation.
  • Any future active-testing features will require additional identity verification, explicit scope approval and a kill switch, and will be off by default.

If you are an asset owner

If you believe ProbeHunt traffic reached your systems without your permission, email abuse@probehunt.web.id with the domain, time and any request details. We will investigate, stop the activity, and respond. Our checks identify themselves with the user agent ProbeHunt-SafeCheck/1.0 (+https://probehunt.web.id).

Enforcement

Violations may lead to immediate suspension or termination, removal of verified assets, preservation of logs, and — where required by law — reporting to the authorities.

Researchers

Found a vulnerability in ProbeHunt itself? See our security.txt or email security@probehunt.web.id. Please do not test ProbeHunt beyond what is needed to demonstrate the issue.