Acceptable use policy

Only test what you may test

• Test only websites and apps that you own, or that the owner has authorised you in writing to test (for example an agency with a signed contract). Keep proof of the permission and give it to us if we ask.
• Do not test third-party sites — competitors, clients without a contract, platforms you merely use (social networks, marketplaces, banks, payment pages).
• Do not test government sites or critical infrastructure (energy, water, telecoms, banking and payments, health, transport) without written authorisation from the organisation that runs them.
• Uploaded APKs must be your own app, or one you are authorised to test.

Never use the service to

• attack, disrupt or overload any system (denial of service, flooding, stress testing);
• look for or exploit vulnerabilities in systems you are not authorised to test;
• collect personal data from sites (scraping people’s data), harvest email addresses or build lists;
• try stolen or guessed credentials (credential stuffing, brute force) — in the login checkpoint use only your own account or a test account;
• send spam or test pages that are used for phishing, malware or fraud;
• upload malware, files you have no right to share, or illegal content.

Do not get around our protections

• Do not try to reach private, internal or cloud-metadata addresses through our browsers (we block them).
• Do not get around rate limits, plan limits or the one free check per 30 days — for example with extra accounts, VPNs or proxies to get more free checks.
• Do not interfere with the service, probe it or test its security except under our responsible-disclosure rules.

What happens if the rules are broken

• We may stop running audits, block the domain, suspend or close the account without refund for the current period.
• Where the law requires it, or to protect others, we may pass information to the affected site owner or to the authorities.
• You are responsible for claims caused by testing without permission (see the Terms).

Site owners: report misuse or opt out

If TesterAgent tested your website without your permission, or you don’t want it to be tested by our users at all, tell us with the form below or by email to [[OWNER: abuse email (ABUSE_EMAIL)]] / the Contact page. We review every request; once we have confirmed it, the domain is added to our blocked list and nobody can run a free check, add it as a site or run an audit of it (subdomains included). Requests and the reporter’s email are kept 365 days.