Acceptable use

Run scans and adversarial tests only against systems you own or have explicit written permission from the owner to test. The authorization must cover the endpoint, account, methods, limits, testing window, connected tools and any affected third-party service. Owning an application does not automatically authorize testing its hosting or model provider.

Prefer staging and synthetic data. Set rate and cost limits, emergency contacts, stop conditions and exclusions for destructive or real-world actions. Confirm whether tool actions can send messages, make purchases, modify records or access production systems. Keep external provider terms and usage limits in scope.

• Unauthorized access, probing another customer’s workspace, credential theft or evasion of service security controls.
• Malware delivery, unlawful exploitation, disruption or use of findings against third parties without permission.
• Submitting unlawful content or personal information you have no right to process.
• Disabling safeguards, bypassing quotas or interfering with availability.
• Redistribution, resale or operating a service for others outside a written license or agency agreement.

Findings may contain sensitive information. Restrict report access, redact before sharing, and follow authorized disclosure processes. Completed, incomplete and untested outcomes must remain distinct. No test guarantees that a system is free of vulnerabilities.

We may suspend or terminate access for misuse under the Terms of Service, and comply with applicable legal requirements. Report suspected abuse or a vulnerability in Nyraxis to support@nyraxis.io, with a concise description and safe reproduction details. Do not access other customers’ data to demonstrate impact.