ACCEPTABLE USE

01. THE CORE RULE

Crossfyre is a security testing platform for authorized penetration testing and vulnerability assessment, operated by Clickswave Labs Private Limited. It is a power tool, and your authorization is what makes a test legitimate. This policy is part of our Terms of Service.

02. YOUR AUTHORIZATION

Before pointing Crossfyre at any target, you must hold a valid, current authorization to test it, such as a signed engagement contract, a scope document, or a bug bounty programme that explicitly permits the assets and techniques you use. You must stay within that scope at all times. The responsibility to confirm authorization is yours, not ours.

The product enforces part of this itself. Before the vulnerability engine injects into an endpoint, it checks that the endpoint's host is the scan's target or is on your workspace scope list, and skips it otherwise. Nothing a scan discovers is ever added to that list. The engine is also built not to change the application it tests, and our Security page sets out what that covers and where it stops. None of this checks whether you are authorized to test a target, so that responsibility stays with you.

03. PROHIBITED CONDUCT

You must not use the Service to:

• Access, attack, or disrupt any system without authorization.
• Conduct denial of service or resource exhaustion against third parties.
• Deploy ransomware, steal data, or cause damage beyond an agreed test scope.
• Target critical national infrastructure, healthcare, or systems where testing could endanger life, unless expressly contracted and lawful.
• Harass, stalk, or surveil individuals.
• Resell, sublicense, or expose the platform as a service to let others attack targets they are not authorised to test.
• Evade billing, share accounts, or circumvent platform limits and node credentials.
• Break any applicable Indian or local law in the jurisdiction of you or your target.

04. ENFORCEMENT

We may suspend or terminate access immediately, without refund, where we reasonably believe this policy has been breached. We keep audit logs and will cooperate with valid legal process. Serious or unlawful misuse may be reported to the relevant authorities.

05. YOUR LIABILITY

You are solely responsible for how you use Crossfyre and for the legality of your actions. To the extent permitted by law, you agree to indemnify and hold harmless Clickswave Labs Private Limited against any claim, loss, or penalty arising from your use of the Service in breach of this policy or the law.

06. REPORTING ABUSE

To report misuse of the platform, email [email protected]. Operator: Clickswave Labs Private Limited, Gujarat, India.