Cerberon is built to find weaknesses so they can be fixed. This policy applies to the Cerberon software, our websites and our Services. Breaking it may lead to suspension or termination of your licence or engagement, and we may report unlawful activity to the authorities.
You must
- test only systems, applications, networks, cloud accounts, mobile apps and code that you own or have written permission from the owner to test,
- keep evidence of that permission and show it to us on request,
- respect the scope, rules of engagement and testing windows you have agreed with system owners,
- follow the laws that apply to you, including India’s Information Technology Act, 2000 and the computer misuse laws of every country where your targets are, and
- protect the findings, credentials and reports you produce as confidential.
You must not
- scan, test or attack any system without authorisation, including systems of former employers, competitors or the public,
- use the software or Services to cause harm, including denial of service, data destruction, extortion or stealing data,
- use findings to exploit a third party rather than to fix the weakness or report it responsibly,
- develop or distribute malware, or use the software as part of a criminal service,
- bypass licence controls, or share, resell or host the software for others without our agreement,
- test our own infrastructure except under our disclosure policy, or
- use our websites to send spam or abusive messages.
Reporting misuse
If you believe someone is using Cerberon to attack your systems, email security@cerberon.dev with what you have seen. We will investigate and act within our ability, but because the software is self-hosted we cannot see or stop what runs on a customer’s own server.