Acceptable Use Policy

This Acceptable Use Policy is part of our Terms of Use. It applies to you, to everyone in your organization, and to every application, SDK, and API client that uses credentials you issue or access you are granted through EndPointBlank.

1. You may not use EndPointBlank to

• Break any law, or help anyone else break one.
• Call an API, or use a credential, that you are not authorized to use, or go beyond the access another organization granted you.
• Attack, probe, or scan systems without permission, including denial-of-service attacks, vulnerability scanning, credential stuffing, or brute-forcing credentials or sign-in codes.
• Send spam or other unsolicited messages through our email, SMS, Slack, or Teams notifications, or carry out phishing, fraud, or impersonation, including posing as another organization when inviting clients.
• Collect, store, or send personal information without a lawful basis, or send data the Service is not designed to protect, such as payment card numbers or health data, in request records.
• Distribute malware, or content that is illegal, infringes someone's rights, sexually exploits children, or promotes violence or harassment.

2. Protecting the Service

• Do not try to get around plan limits, rate limits, overage ceilings, or access controls, for example by creating extra organizations or accounts.
• Do not try to read another organization's data, reuse another organization's credentials, or break the isolation between organizations or intake servers.
• Do not interfere with or overload the Service or its providers, or send it traffic that does not come from a real use of your APIs.
• Do not reverse engineer the Service or try to extract its source code, except as the law or an SDK's own license allows.
• Do not resell or provide the Service to third parties as your own product without our written permission. Creating managed accounts for your own customers through the management API, as documented, is permitted.

3. Security research

If you find a vulnerability, please report it to support@endpointblank.com and give us reasonable time to fix it before disclosing it. Testing must not touch other organizations' data or degrade the Service.

4. Enforcement

We may investigate suspected violations and, depending on how serious they are, disable a credential, grant, or notification destination, refuse requests, suspend or close an account, or report activity to the authorities. Where we can, we will tell you first and give you a chance to fix the problem.

5. Reporting abuse

To report abuse of EndPointBlank, write to support@endpointblank.com.