Allowed
- Reviewing, testing and fixing code, systems and infrastructure you own or are authorized in writing to assess.
- Incident response, forensics and log analysis for your own organization or your clients.
- Analyzing malware samples to understand them and build detections.
- Penetration testing and red-team exercises within an agreed scope.
- CTFs, training labs, coursework and deliberately vulnerable practice targets.
- Security research and responsible disclosure.
Not allowed
- Accessing, scanning, exploiting or disrupting any system without the owner's authorization.
- Creating or deploying malware, ransomware, credential stealers, botnets or other tools meant to harm systems you don't control.
- Phishing, social engineering or fraud against real people or organizations outside an authorized engagement.
- Denial-of-service attacks or stress testing third-party services.
- Evading security controls on systems you're not authorized to test.
- Stalking, doxxing, or collecting personal data about people without a lawful basis.
- Anything illegal where you or the target are located.
Your responsibility
You're responsible for what you do with RedWatch's output. Before testing a live system, make sure you have permission and a defined scope. If you're unsure, ask the system owner first.
Enforcement
We may suspend or close accounts that break this policy, without refund of unused credits, and may cooperate with law enforcement where required. Report misuse to [abuse@your-domain].