Acceptable Use Policy

1. Introduction

This Acceptable Use Policy (“AUP”) sets forth mandatory operational standards and strict prohibitions governing your access to and use of Stillpoint (“Platform”, “we”, “us”, or “our”), operated by •[LEGAL_ENTITY_NAME].

This AUP applies to all registered subscribers, workspace members, API clients, and automated processes. By creating an account or configuring monitors, you explicitly agree to comply with this policy in full.

2. Permitted Usage

You may utilize the Platform exclusively for lawful operational observability purposes, including:

• Conducting scheduled synthetic HTTP/HTTPS health checks against websites, web APIs, and web services that you own, operate, or have express contractual authority to monitor.
• Monitoring SSL/TLS certificate validity dates and receiving automated expiration notices for domains registered under your administrative control.
• Measuring network latency, DNS resolution timings, and server response times for performance benchmarking and incident management.
• Publishing branded public or private status pages to communicate operational status transparently with your legitimate end users and customers.

3. Prohibited Activities

Any use of the Platform that disrupts network infrastructure, violates statutory laws, infringes upon third-party rights, or exploits synthetic monitoring nodes for malicious purposes is strictly forbidden. Engaging in prohibited activities will trigger immediate account termination and potential referral to law enforcement authorities.

4. Unauthorized Monitoring

Specifically, you agree that you will not:

• Target competitor websites, private corporate portals, or government infrastructure for the purpose of harassment, competitive intelligence extraction, or service degradation.
• Use synthetic probes to generate unsolicited traffic spikes or bypass access control paywalls.
• Represent to third parties that you have authorization to monitor a website when no such authorization has been formally granted.

Stillpoint reserves the right to demand written proof of authorization for any target URL registered on our platform. Failure to provide satisfactory proof within twenty-four (24) hours will result in immediate monitor deactivation and workspace suspension.

5. Unauthorized Access & Pentesting Restrictions

You agree not to:

• Attempt to gain unauthorized access to any accounts, computer systems, or networks connected to our platform through hacking, password mining, or any other unauthorized means.
• Probe, scan, or test the vulnerability of our synthetic probe infrastructure, application servers, or database clusters without an executed formal bug bounty authorization.
• Bypass or attempt to defeat authentication controls, token validation routines, or API quota gates.

6. Security Testing Restrictions

Stillpoint is a synthetic health surveillance platform, not a penetration testing or vulnerability exploitation utility. You must not configure custom HTTP payload headers, POST bodies, or injection strings intended to exploit Known Vulnerabilities and Exposures (CVEs), SQL injections, Cross-Site Scripting (XSS), or Command Injection vulnerabilities on target web servers.

7. Malicious Activities

The Platform must never be used in connection with:

• Distributing malware, viruses, trojans, worms, ransomware, or logic bombs.
• Command-and-control (C2) communication or botnet coordination.
• Hosting or linking to child sexual abuse material (CSAM), non-consensual imagery, terrorist propaganda, or materials inciting imminent violence.
• Conducting illegal gambling, narcotics distribution, or unregulated arms trade in violation of applicable laws.

8. Abuse of Monitoring Infrastructure

Our distributed monitoring network relies on shared probe resources engineered for precision measurement. Any attempts to abuse or monopolize probe infrastructure are strictly forbidden:

• Server-Side Request Forgery (SSRF): Attempting to force our probe nodes to query internal loopback addresses (127.0.0.1), RFC-1918 private subnets (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), or cloud link-local metadata endpoints (169.254.169.254) is actively blocked and logged as an adversarial exploit.
• Denial of Service (DoS): Configuring multiple high-frequency monitors directed against the same target URL or single IP address in an effort to exhaust the target’s network bandwidth or connection pool.
• Resource Exhaustion: Submitting abnormally large redirect loops, endlessly streaming HTTP payloads, or malicious gzip compression bombs designed to exhaust memory on our worker nodes.

9. Excessive API Requests & Rate Limits

To maintain fair resource allocation, our APIs enforce tiered rate limits (burst and sustained throttles). You must not circumvent rate limiting mechanisms through IP address rotation, automated bot swarms, or distributed scraping scripts. Programmatic API access must respect 429 Too Many Requests HTTP response codes and implement exponential backoff retry algorithms.

10. Spam, Phishing, and Fraud

You agree not to:

• Configure public status pages with deceptive branding, deceptive login forms, or phishing motifs designed to harvest credentials from end users.
• Utilize our alert dispatch systems (email or webhook) to dispatch unsolicited bulk marketing messages, commercial spam, or deceptive alerts.
• Provide disposable, temporary, or fraudulent email addresses during registration to evade account billing or ban enforcement.

11. Intellectual Property Violations

You must not upload, configure, or display on status pages any corporate trademarks, logos, copyrighted text, or intellectual property that you do not possess valid licensing or express permission to display.

12. Account Misuse and Sharing

Account credentials must not be shared among unassociated external parties. Automated account creation scripts (“account farming”) designed to aggregate free-tier quotas are strictly prohibited and will result in the immediate deletion of all affiliated accounts.

13. Enforcement, Suspension, and Termination

We employ automated heuristics and manual audit procedures to detect violations of this AUP. If a violation is confirmed, we reserve the right to take immediate remedial action without prior notice:

• Instant pausing or permanent deletion of offending monitors.
• Revocation of API keys and invalidation of active session tokens.
• Complete suspension or termination of your account workspace.
• Permanent blacklisting of domain names, IP addresses, and payment profiles associated with the abusive activity.
• Reporting severe criminal violations (such as SSRF attacks against cloud infrastructure or DDoS operations) to competent law enforcement agencies.

14. Reporting Abuse and Violations

If you are a system administrator or web property owner and believe that an automated probe from Stillpoint is querying your server without authorization or in an abusive manner, please report the incident immediately to our dedicated abuse response desk.

Please include the target URL, your server log extracts displaying our User-Agent header and source IP address, and proof of domain ownership. We will immediately blacklist your endpoint from our synthetic probe network upon receipt of your report.

15. Contact Information