Acceptable Use Policy

This Acceptable Use Policy (the "Policy") is part of, and incorporated by reference into, the Terms of Service. It applies to everyone who uses Dokven. Capitalized terms have the meaning given in the Terms. A breach of this Policy is a breach of the Terms and may result in immediate suspension or termination.

Pointing the Service at a website, API, or system that you do not own and are not authorized to test may be a civil and criminal offense in your jurisdiction and the Target's. You bear that risk and that liability, not the Operator.

You must not, and must not attempt to, use the Service to:

• test, scan, crawl, probe, monitor, or load-test any Target you do not own or lack written authorization to test;
• gain unauthorized access to any system, account, or data; circumvent authentication, paywalls, rate limits, or other access controls; or access non-public, login-gated, or otherwise protected data without permission;
• cause, or attempt to cause, a denial of service, excessive load, degradation, or any condition that threatens the integrity, performance, security, or availability of a Target or of the Service;
• use results, findings, recordings, or proof-of-concept output to attack, exploit, breach, extort, or otherwise harm any system, person, or organization;
• upload, transmit, or distribute malware, exploits, or malicious code, or use the Service to develop or stage an attack;
• collect, harvest, or process personal data without a lawful basis, or use the Service to surveil, profile, or harass individuals;
• violate any law, regulation, third-party right, or applicable third-party terms of service, or violate a Target's robots directives where you are legally required to honor them;
• resell, sublicense, or republish raw Service output as a competing scanning, testing, or monitoring service;
• reverse-engineer, decompile, scrape, or copy the Service except as permitted by law; probe our own systems or sub-processors without authorization; or interfere with other users; or
• engage in fraud, deception, infringement, or any other unlawful, harmful, or abusive activity, or assist anyone else in doing any of the above.

The Service is metered in tokens and protected by rate limits, concurrency limits, and abuse controls. You must not bypass, disable, or overwhelm these controls, and you must not use automation, scripts, or shared accounts to exceed your plan's fair use. We may apply reasonable technical limits to protect platform reliability and other users.

We may, at our discretion and without any obligation to pre-screen activity:

• rate-limit, throttle, or block requests;
• require domain-ownership verification or proof of authorization before permitting certain tests;
• investigate suspected violations and preserve relevant records;
• suspend or terminate accounts immediately for actual or suspected violations or legal/liability risk; and
• report activity to, and cooperate with, law enforcement and affected parties as permitted or required by law.

We are not responsible for monitoring the Service, and our decision not to act in any instance does not waive our right to act later.

If you believe a Target you own or operate has been tested using Dokven without authorization, or you want to report any other abuse, contact us at support@dokven.com with the affected domain or system, the approximate time, and any supporting detail. We investigate credible reports and may demand proof of authorization from the responsible user. Security vulnerabilities in Dokven itself should be reported per the Security page.