Acceptable use policy
Version 3 · Last updated
Afterprompt is for checking your own apps. This page says what you may do with it, and how our scanner behaves toward the sites it visits.
What you may do
- Scan websites you own or are allowed to assess.
- Connect repositories and verify sites that you control.
What you may not do
- Use the service to attack, overload or probe systems you aren't allowed to test.
- Automate mass scanning of other people's sites, or try to get around rate limits.
- Upload code you have no right to process, try to break out of our sandboxes, or try to reach other customers' data.
- Use findings to harm anyone.
How our scanner behaves
The free scan is passive: ordinary GET requests, like a browser, to the exact address submitted, from a bot that identifies itself as AfterpromptBot. It sends about 80 requests at most, three at a time, and scans the same address at most once per hour. It never logs in, submits forms or uses keys it finds. Details are on how it works.
Opt out and abuse
To exclude your site from scans, or to report abuse, write to security@afterprompt.io from an address on your domain. We may suspend accounts that break this policy.