This policy explains how you may and may not use the QuantSec website, services and reports. It forms part of our Terms of Service.
1. Authorised scope only
You may only ask us to assess systems, code, repositories, infrastructure or on-chain assets that you own or are authorised to have assessed. We may ask for evidence of that authorisation before we start, and we will not proceed without it.
2. Prohibited uses
You must not use QuantSec services or reports to:
Attack, exploit or gain unauthorised access to any system, network, account or data.
Assess a third party’s systems or assets without their permission.
Break any law or regulation, including export control and sanctions laws.
Misrepresent the scope, findings or date of a QuantSec report, or alter a signed report.
Claim or imply that QuantSec has endorsed or certified a product, system or organisation beyond what a report actually states.
3. The website
When using the website, you must not:
Interfere with or disrupt the website or the infrastructure that runs it.
Use automated means to access the website in a way that places an unreasonable load on it.
Attempt to probe or test the website for vulnerabilities except as allowed by our responsible disclosure policy.
Upload or send anything that contains malware or that you do not have the right to share.
4. What happens if this policy is broken
We may refuse, suspend or end any service, withdraw a report or take other reasonable action if we believe this policy has been broken. Where appropriate, we may report activity to the relevant authorities.
5. Reporting misuse
If you become aware of misuse of QuantSec services or reports, or of a report that appears to have been altered, please email [email protected].