Acceptable Use Policy
This Acceptable Use Policy ("AUP") governs your use of the platform. By using the platform, you agree to comply with this AUP. Violations may result in account restriction, suspension, or termination and, where required by applicable law, referral to the appropriate authorities.
1. Authorized use
The platform is intended for legitimate activities including:
- ›Authorized security research conducted with appropriate permission from the asset owner
- ›Secure code analysis and developer assistance for software you own or are authorized to modify
- ›Defensive security operations
- ›Blue-team automation
- ›Security Operations Center (SOC) workflows
- ›Educational use
- ›Employer-authorized training
- ›Compliance activities
- ›Security audits
- ›Risk assessments
- ›Software development
- ›AI-assisted development and research
2. Prohibited activities
You must not use the platform to:
- ›Conduct phishing, vishing, smishing, or other unauthorized social-engineering attacks
- ›Develop, distribute, or deploy malware, ransomware, spyware, stalkerware, or destructive payloads for harmful or unauthorized purposes
- ›Steal, traffic in, or misuse credentials, payment information, personal information, or session tokens
- ›Access, attack, or assess systems you do not own or do not have authorization to test
- ›Conduct fraud, scams, illegal commerce, counterfeit-document schemes, or wire fraud
- ›Create or distribute child sexual abuse material (CSAM) or sexual content involving minors
- ›Promote or facilitate terrorism or mass violence
- ›Conduct unauthorized attacks against critical infrastructure
- ›Circumvent safety, legal, billing, security, or compliance controls of third-party services
- ›Resell, sublicense, or rebrand the platform without an applicable commercial agreement
- ›Interfere with platform integrity through rate-limit evasion, account farming, payment fraud, or similar abuse
3. Authorization requirement
For reconnaissance, vulnerability assessment, penetration testing, or other security-testing activities involving third-party systems, you represent that you possess the authorization required to conduct the activity.
The platform may request evidence of authorization where appropriate. Using the platform to conduct unauthorized testing may constitute a material breach of this AUP and the Terms of Service.
4. Account responsibility
You are responsible for activity conducted through your account. Keep your account credentials confidential and use available account-security features.
Promptly report suspected compromised credentials to security@wormgpt.com.
5. Enforcement
Where appropriate and permitted by applicable law and contractual terms, we may:
- ›Restrict, suspend, or terminate accounts that violate this AUP
- ›Apply the applicable refund terms to accounts terminated for serious policy violations
- ›Preserve or disclose information where required by applicable law
- ›Investigate suspected fraud, abuse, or security incidents
- ›Cooperate with legally valid requests from authorities
6. Reporting abuse
Suspected violations can be reported through the platform's abuse-reporting process or by emailing abuse@wormgpt.com.
Security vulnerabilities should be reported through the Responsible Disclosure process or to security@wormgpt.com.
7. Changes
This AUP may be updated from time to time. Material changes may be communicated through appropriate channels such as email or an in-app notice. Continued use following the effective date of an updated policy constitutes acceptance where permitted by applicable law.