Acceptable Use Policy
This Acceptable Use Policy applies to anyone accessing the AetherGuard Technologies client portal at client.aetherguard.xyz (the "Portal"). It is part of our Terms of Service. Because AetherGuard is a security company, we hold ourselves and our clients to a clear standard here: the Portal is a business tool, not a target.
1. Do not target AetherGuard's own systems
Unless a specific, currently active engagement explicitly authorizes it in writing, do not scan, probe, fuzz, exploit, or attempt to bypass authentication, authorization, or rate limiting on the Portal or any other AetherGuard-operated system. If you believe you've found a security issue in the Portal itself, please report it responsibly per Section 5 rather than continuing to test it.
2. Do not access data that isn't yours
Do not attempt to view, modify, or infer another client's tickets, billing information, engagement records, or account details, including by manipulating URLs, request parameters, or file identifiers. Every account-scoped action in the Portal is checked server-side against your own client and user IDs; attempting to work around that check is a violation of this policy regardless of whether the attempt succeeds.
3. Ticket and file upload conduct
- Do not upload malware, exploit payloads, or other malicious files to a ticket unless a specific engagement calls for it and secure handling has been agreed with your account team in advance.
- Do not use ticket attachments to send unsolicited bulk content, or files unrelated to a legitimate support or engagement need.
- Uploaded files are scanned and validated before storage; files that fail validation, or whose actual content does not match the type they claim to be, will be rejected.
4. General conduct
- No harassment, threats, or abusive communication toward AetherGuard staff or other users through tickets or any other Portal feature.
- No use of the Portal to violate any applicable law, or to infringe the intellectual property or privacy rights of AetherGuard or any third party.
- No attempt to interfere with the availability of the Portal for other clients (for example, automated bulk requests, scripted account creation, or denial-of-service style traffic).
- No sharing of your sign-in access with anyone outside your organization, or with individuals inside your organization who shouldn't have it (see Section 2 of the Terms of Service on account responsibility).
5. Reporting a security issue
If you discover a vulnerability in the Portal, please report it to us before taking any further action, through a support ticket marked "Security" or by emailing support@aetherguard.xyz. Good faith reports made through this channel, without accessing data beyond what is needed to demonstrate the issue, will not be treated as a violation of this policy.
6. Enforcement
Violations of this policy may result in a warning, suspension, or termination of Portal access, and, where the conduct is severe (for example, an actual attempt to breach another client's data or AetherGuard's own systems), referral to law enforcement. We aim to be proportionate: most first-time, low-severity issues are handled with a conversation, not a lockout.