Acceptable use policy

Use yof on what is yours

Check only sites, apps, assistants, repositories and databases you own or have written permission to test. Proving a site is yours is how you confirm this.

Do not

• Point yof, yof attack or any yof tool at a system you are not allowed to test.
• Try to get around proof of ownership, rate limits or account limits, or use many accounts to do so.
• Use findings to break into, damage or extort anyone.
• Change a yof report and present it as yof's, or claim a report says an app is safe, certified or compliant.
• Resell reports, except reports from the Agency bundle for your own clients.
• Attack, overload or probe yof itself outside the security policy on yof.io/security.
• Upload malware or content you have no right to share.

Reporting abuse

If someone uses yof against you, write to support@yof.io. We may suspend accounts that break this policy.