Scoped and authorized work
Assessments and penetration testing require an agreed scope and explicit authorization. Findings are documented to support responsible remediation, with confidentiality and disclosure expectations established for the engagement.
Controlled research infrastructure
Infrastructure access is application-only. Identity, organization, use case, and authorization are reviewed. Approved access is governed by isolation, least privilege, workload restrictions, resource quotas, audit logging, and monitoring.
Prohibited use
Unauthorized testing, data extraction, disruption, phishing, unrestricted exploit hosting, anonymous advanced infrastructure access, and bypassing controls are prohibited. Potentially harmful analysis workloads require explicit approval and containment.
Reporting security issues
Use the dedicated vulnerability reporting channel when available. Include sufficient technical context while minimizing sensitive information. Do not place unresolved findings in general business inquiries.
Report a vulnerability · Contact Exploitex · Infrastructure acceptable use